Go html/template XSS flaw (CVE-2026-27142) fixed in Go 1.26.1, 1.25.8; Windows users urged to patch now
The Go programming language's standard library contains a critical security vulnerability in its html/template package that exposes web applications to cross-site scripting attacks. Tracked as...
CVE-2026-3731: libssh SFTP Off-by-One Bug Exposes Supply Chain Vulnerabilities
A subtle off-by-one error in libssh's SFTP extension handling has been assigned CVE-2026-3731, triggering security releases across multiple platforms and exposing critical questions about API hygiene...
CVE-2026-26018: CoreDNS Loop Vulnerability Threatens Kubernetes Clusters
CoreDNS has been assigned CVE-2026-26018, a high-severity denial-of-service vulnerability in the loop plugin that can be triggered remotely by an attacker who can send carefully crafted DNS queries....
CoreDNS CVE-2026-26017 TOCTOU Vulnerability: How Plugin Ordering Flaw Bypasses DNS Security Controls
CoreDNS has disclosed a critical security vulnerability that allows attackers to bypass DNS access controls through a subtle plugin ordering flaw. CVE-2026-26017, a Time-of-Check Time-of-Use (TOCTOU)...
Senate Authorizes ChatGPT, Gemini, Copilot for Aide Work, Mandates Human Verification
The U.S. Senate has authorized frontline aides to use three commercial AI chatbots for official work: OpenAI's ChatGPT, Google's Gemini, and Microsoft's Copilot. This decision represents a...
Windows 11 KB5079473 March 2026 Update: Sysmon Integration, Emoji 16 Support, and WebP Wallpaper Engine
Microsoft released cumulative update KB5079473 for Windows 11 on March 10, 2026, advancing both the 25H2 and 24H2 branches to new build numbers. The update pushes OS Build 26200.8037 for Windows 11...
Senate Issues First AI Policy, Authorizing ChatGPT, Gemini, Copilot for Aides
The U.S. Senate has quietly authorized staff to use three mainstream conversational AI assistants—OpenAI's ChatGPT, Google's Gemini, and Microsoft's Copilot—for non-sensitive work. A one-page...
Microsoft Copilot Cowork and Anthropic Claude Cowork: The Multi-Model AI Agent Platform Battle Begins
Microsoft and Anthropic have both announced multi-model AI agent platforms called \"Cowork,\" signaling a fundamental shift in how enterprises will deploy artificial intelligence. Microsoft's Copilot...
Microsoft Copilot Cowork Integrates Anthropic Claude Agents for Enterprise AI Collaboration
Microsoft announced Copilot Cowork on March 9, 2026, integrating Anthropic's Claude agent technology directly into Microsoft 365. This strategic partnership represents Microsoft's most significant...
Microsoft Intune Now Supports Secure Boot Certificate Updates via Settings Catalog
Microsoft has officially released guidance for enabling Secure Boot certificate updates through Microsoft Intune's Settings catalog, providing enterprise administrators with a critical tool for...
Google Gemini's Workspace Expansion Challenges Microsoft 365's AI Dominance
Google has launched a comprehensive rollout of Gemini AI across its Workspace productivity suite, directly challenging Microsoft's Copilot integration in Office 365. The expansion brings...
Microsoft Files Amicus Brief Supporting Anthropic in Pentagon Supply Chain Dispute
Microsoft has taken the unusual step of filing an amicus brief in federal court supporting Anthropic's challenge to the Department of Defense's supply chain risk designation. The tech giant argues...