🕵️ RESEARCH & DEEP DIVES
Microsoft: September updates break USB audio on some Windows 11 24H2 PCs
Microsoft confirmed its September 2026 security updates break USB audio on some Windows 11 PCs.- Affects devices running Windows 11 version 24H2 or later that installed the September 8, 2026 security updates KB5124008 or KB5124012.
- Limited to USB Audio Class 1.0 devices, which may fail to start or produce audio after the update.
- Users see 'This device cannot start (Code 10)' errors in Device Manager, no audio output, and unresponsive volume controls and sound settings.
- Some impacted USB speakers fail only when using multichannel audio features such as 3D audio or 8-channel modes.
- No official workaround has been provided by Microsoft yet; the issue is documented on the release health dashboard.
Zero trust is the future. But enterprises still need their VPNs. — Cybersecurity Dive
Security teams are adopting AI faster than they trust it — Cybersecurity Dive
Revolut discloses data breach exposing financial info, passports — BleepingComputer
Three JFrog Artifactory Flaws Exploited for Backdoor Deployment — SecurityWeek
ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks — SecurityWeek
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users — The Hacker News
SourceCodester Inventory Management System invoice.php authorizationA vulnera... — CVE ThreatInt
Publishing limits the compressed size of a VSIX (ovsx.publishing.max-content-... — CVE ThreatInt
SourceCodester Inventory Management System Product Management products_handle... — CVE ThreatInt
SourceCodester Inventory Management System Vendor Management vendors_handler.... — CVE ThreatInt
SourceCodester Inventory Management System Customer Management customers_hand... — CVE ThreatInt
Local privilege escalation in the Logi Options+ updater service on WindowsA l... — CVE ThreatInt
D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflowA flaw has be... — CVE ThreatInt
D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-base... — CVE ThreatInt
In OpenStack Glance before 32.0.1, the location API does not validate destina... — CVE ThreatInt
The Android application "YAMAP -Social Trekking GPS App" contains an improper... — CVE ThreatInt
SolarView Compact contains a cross-site scripting vulnerability in Image Mana... — CVE ThreatInt
SolarView Compact contains a cross-site scripting vulnerability in Schedule S... — CVE ThreatInt
SolarView Compact contains an OS command Injection vulnerability in in Schedu... — CVE ThreatInt
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.... — CVE ThreatInt
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, a... — CVE ThreatInt
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wi... — CVE ThreatInt
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404R... — CVE ThreatInt
An improper neutralization of directives in dynamically evaluated code ('Eval... — CVE ThreatInt
GitHub Pays $100,000 Bounty for Critical RCE Flaw in Git Push Pipeline — Cyber Security News
Hackers Deploy Casbaneiro Banking Trojan That Activates When Victims Open Bank Websites — Cyber Security News
Hackers Abuse YouTube Gaming Channels and SEO Poisoning to Deploy RATs and Chrome Hijacker — Cyber Security News
Have anyone tried this — r/cybersecurity
🔓 CVEs & KEV
- CVE-2026-89080 — CVSS 7.5 — Really Simple Security before 9.8.1 - Unauthenticated 2FA Bypass via Email Provide...