WAY 401 Hida House - Al Khuwair South - Muscat -Oman
info@tscogroup.com

Denny Galindo

The Day-One Hole in Zero Trust Architecture

Zero Trust principles are now commonplace in enterprise infrastructure; organizations have spent years investing in measures that secure identities and systems against sophisticated attacks. However, human error is still a readily exploitable path into even hardened organizations, particularly where trust is established manually. Onboarding and service desk processes are a natural pressure point where agents may need to make high-impact access decisions with limited context, while attackers only need to convince one person that they are who they claim to
Read More
Researchers escape OpenAI Codex sandbox to run commands on host

Researchers escape OpenAI Codex sandbox to run commands on host

Security researchers found two ways out of the OpenAI Codex sandbox, one of them capable of running commands on a developer's machine from Codex's most locked-down mode, with no approval prompt and nothing shown on screen. Both flaws were reported to OpenAI on August 12 and fixed within eight days, according to Oren Yomtov of Accomplish AI. The more serious of the two, which the researchers call Heapjack, turns a routine action into remote code execution: open someone else's repository in
Read More
Microsoft fixes broken copy and paste for Excel 2016 users

Microsoft fixes broken copy and paste for Excel 2016 users

Microsoft has fixed a known issue that causes copy-and-paste failures for some Excel users after installing the September 2026 KB5002914 security update. This follows a wave of customer reports on the Microsoft Q&A forums and Reddit that KB5002914 breaks copy-and-paste, autofill, and formula dragging in Excel. "Although users try to paste content, the source remains selected and the destination is unmodified," Microsoft said when it confirmed these issues earlier this week and blamed them on what it described as a
Read More
Microsoft releases emergency Windows updates to fix RDS failures

Microsoft releases emergency Windows updates to fix RDS failures

Microsoft has released emergency out-of-band Windows updates to fix Remote Desktop Services failures caused by this month's security updates, along with Hyper-V and USB audio problems on some Windows versions. The September 2026 security updates caused Remote Desktop Services (RDS) to become unstable on affected systems, leading to RDP connection and sign-in failures and, in some cases, unresponsive servers. Microsoft previously acknowledged the issue after Windows administrators reported widespread RDS problems following the September updates. Affected systems could also experience
Read More
Fun or pointless? Google Messages chat themes divide readers in poll

Fun or pointless? Google Messages chat themes divide readers in poll

Joe Maring / Android Authority Add Android Authority on Google: Customization is part of the fun of Android, or at least gives us a bit more sense of individualism. We spend plenty of time tweaking wallpapers, icons, and lock screens, so it makes sense that Google Messages is getting in on the act too. Its new chat themes let you give individual conversations their own look, and we wanted to know whether our readers were excited to try them out.
Read More

HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload

A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes. The OpenSSL team has silently fixed the vulnerability (no identifier assigned) and backported the patch to older releases. Because the OpenSSL software is the foundational backbone for secure internet communication, organizations
Read More

Archives

Categories