Cve 2025 8088
The latest Cve 2025 8088 coverage — news, analysis, and updates from the WindowsNews.AI desk.
Konica Minolta Brings CAC/PIV Secure Print to Microsoft 365 GCC High with PKI Cloud Suite
Konica Minolta launched the PKI Cloud Suite for Microsoft 365 GCC High, enabling CAC/PIV authenticated printing and scanning on bizhub MFPs with zero on-premises servers. The solution integrates natively with Entra ID and Universal Print, closing a critical zero-trust gap for defense and civilian agencies. It is available immediately through federal partners, with tiered licensing and a free upgrade path for existing customers.
FBI Alerts to Kali365 Phishing-as-a-Service Hijacking Microsoft 365 Accounts Using Device Codes
The FBI warns that the Kali365 phishing-as-a-service platform is exploiting Microsoft’s device-code flow to hijack Microsoft 365 accounts, bypassing MFA and conventional defenses. This in-depth article explains how the attack works, why it’s so effective against Windows-centric organizations, and what administrators and users can do to stop token theft before it happens.
Intel Ships Wi-Fi and Bluetooth Drivers 24.50.0 with Major 6GHz Boosts for Windows 11
Intel's new Wi-Fi 24.50.0 and Bluetooth 24.50.0 drivers for Windows 11 and 10 deliver faster 6GHz performance, improved roaming, and critical security fixes. The update boosts throughput, reduces latency, and resolves Bluetooth audio stuttering, making it a essential upgrade for Intel wireless adapter users.
Windows 10 Security Patch Lifeline Extended to October 2027 for Home Users
Microsoft has extended consumer Extended Security Updates for Windows 10 through October 12, 2027, giving home users a second year of post-retirement security patches. The program, expected to cost $30 per year, helps owners of incompatible PCs stay safe while buying time to upgrade. This rare consumer support expansion reflects the stubbornly high Windows 10 install base and rising regulatory pressure around e-waste.
IFI Techsolutions Secures Fourth Consecutive Azure Expert MSP Renewal, Proving Cloud Excellence
IFI Techsolutions Limited has renewed its Microsoft Azure Expert Managed Services Provider status for the fourth consecutive year after a rigorous independent audit. The achievement highlights the company’s deep Azure expertise and commitment to operational excellence, providing enterprises with a trusted partner for cloud managed services. This renewal reinforces the importance of audited certifications in a competitive cloud market.
Microsoft Defender in 2026: The Best Free Antivirus That Comes With Windows 11 — And Its Limits
Microsoft Defender in 2026 offers top-tier antivirus protection seamlessly integrated into Windows 11, making it sufficient for most home users. However, those needing extra services like VPNs, centralized business management, cross-platform support, or advanced ransomware remediation should consider a third-party suite. The decision hinges on individual risk profiles, not just malware detection scores.
ARToken Panel: How a React-Based Phishing Kit Is Hijacking Microsoft 365 Sessions via Device Code Attacks
Cisco Talos uncovered ARToken, a React-based phishing panel linked to EvilTokens that automates device code phishing to steal Microsoft 365 tokens, then uses Primary Refresh Token (PRT) persistence to maintain long-term access. The panel exposes over 80 API endpoints, enabling business email compromise, SharePoint data theft, and cloud lateral movement.
Portuguese Restaurant Kiosk Borked by Windows Code-Signing Check on WinRestKioskWPF.exe
A Portuguese restaurant's Windows kiosk froze with a security warning after WinRestKioskWPF.exe failed a code-signing check on July 1, 2026. The likely cause—an expired or untrusted certificate—spotlights the fragility of locked-down Windows devices when code-signing chains break, and underscores the need for vigilant certificate lifecycle management in point-of-sale deployments.
Azure Security Researcher Matthew Jensen Earns MVR Status After Exposing Entra ID Vulnerabilities in Zero Day Quest
Microsoft's June 30, 2026 MSRC profile highlights Matthew Jensen, an Azure security researcher who leveraged his sysadmin background to uncover critical identity vulnerabilities in Entra ID, earning him Most Valuable Researcher status through the Zero Day Quest bug bounty program. His practical experience proved invaluable in finding flaws that traditional pentesting often misses, and he continues to influence cloud security practices.
Quiet Update: Windows 10 Consumer ESU Now Covers Users Through October 2027
Microsoft has quietly extended its Windows 10 Extended Security Updates (ESU) program for consumers, now offering critical security patches through October 12, 2027. The change adds a second year to the previously announced one-year $30 plan, giving millions of home users more time before they must upgrade or replace unsupported hardware.
wolfSSL Warns of AES-GCM Streaming Flaw CVE-2026-55967 That Bypasses Authentication Past 64 GiB
wolfSSL disclosed CVE-2026-55967, a high-severity bug in its AES-GCM streaming API that failed to reject messages over 64 GiB, breaking authentication and confidentiality. Affecting versions 4.8.0 through 5.9.1, the flaw was patched in version 5.9.2 and has implications for Windows IoT and Azure Sphere devices. Users are urged to update immediately or implement application-level size limits.
GnuPG S/MIME Flaw CVE-2026-57062 Allows Attackers to Bypass Encryption Integrity with Short AES-GCM Tags
A low-severity flaw (CVE-2026-57062) in GnuPG's S/MIME component, gpgsm, can undermine the integrity of AES-GCM-encrypted messages by accepting improperly short authentication tags. Windows users who rely on Gpg4win should immediately upgrade to the patched version to prevent potential forgery attacks.
CrashPlan Touts Free OneDrive Backup for Microsoft 365 at TechCon 365 Atlanta
CrashPlan is set to demonstrate how Microsoft 365 users can leverage OneDrive as a free, secure backup target at TechCon 365 Atlanta this August. The sessions, led by VP Randy De Meno, will showcase granular recovery, compliance tools, and SaaS simplicity, emphasizing the need for third-party cyber resilience to fill gaps in Microsoft's native protection.