Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
AWS has released its 2026 Phase 1a IRAP (Information Security Registered Assessors Program) report on AWS Artifact for Australian customers. An independent assessor certified by the Australian Signals Directorate (ASD) completed the evaluation in June 2026, adding four new AWS services—Amazon Bedrock AgentCore, AWS Parallel Computing Service, AWS Resilience Hub, and AWS Security Incident Response—to the PROTECTED level assessment.
AWS announces the availability of the latest IRAP Phase 1a report on AWS Artifact. The report adds four new services assessed at the PROTECTED level, bringing the total to 167.
AWS announces the availability of the latest IRAP Phase 1a report on AWS Artifact. The report adds four new services assessed at the PROTECTED level, bringing the total to 167.
Microsoft patched a high-severity vulnerability in Active Directory Certificate Services (AD CS) that could enable attackers to conduct certificate-based attacks against domain environments. The Certighost flaw, as it came to be known, threatened the foundation of certificate-based authentication in Active Directory, potentially allowing adversaries to forge certificates, escalate privileges, or impersonate domain entities.
This article discusses a high-severity vulnerability in Microsoft Active Directory Certificate Services that allows privilege escalation. Microsoft has released a patch to address the issue, which could enable attackers to compromise an AD environment.
This article reports on a high-severity vulnerability in Microsoft Active Directory certificates, dubbed 'Certighost'. The flaw enables threat actors to escalate privileges and compromise an AD environment.