SecurityWeek

Noteworthy stories that might have slipped under the radar: Siemens details security advisory policy, OpenAI Codex backdoor risk, Microsoft warns of model weight backdoors.

Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify and repair affected infrastructure.”

The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data.

Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets.

Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame.

Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.

Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches.

It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.

PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.

Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.

Also Thursday, the FBI blamed North Korea for a separate social engineering scheme that officials say resulted in the theft of $400 million worth of cryptocurrency.

Microsoft says failed server health checks disrupted Outlook and other Microsoft 365 services. The company is still investigating the cause and has disclosed no evidence of a cyberattack.

The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.

Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.

Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories.