JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Never be afraid to ask questions GHSA-gg5j-6742-v827: @grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not applied GHSA-73v3-wf97-vpgj: msgpack-ruby JRuby decoder makes uncapped header-count allocations; a 5-byte message forces multi-GiB OOM GHSA-9crm-g4mf-wc5j: Addressable display_uri can show misleading hosts with invalid Punycode A-labels GHSA-539f-xcgw-2gjg: Addressable display_uri can show misleading hosts containing bidi and invisible characters GHSA-qq38-m9mg-xjj5: Addressable: Denial of service in URI path normalization GHSA-jmv2-qgxf-f995: Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js GHSA-f4j9-crrj-867q: Astro: Reflected XSS via unescaped slot names in @astrojs/svelte GHSA-j82w-28jv-3pmj: Addressable: Regular Expression Denial of Service in templates with certain exploded expressions GHSA-9f42-57jx-vpp3: Addressable: Regular Expression Denial of Service in templates with multiple variables GHSA-8gmh-2hhj-2hv9: Addressable URI normalization resolves some dotted path segments to the wrong path Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services Cyber Experts Weigh In: How to Fight Artex & AntiFox Rogue remote-access campaign spread through ScreenConnect add-on, researchers say Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams OpenAI launches security products, tells orgs they’re doomed if they don’t use them Security Agencies Worldwide Found to Use Ad-Based Surveillance System Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide Extortion Group Luna Moth Flits Into Law Firms a Second Time Lego marketplace BrickLink in pieces after ‘unusual activity’ takes it offline for almost a week Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to Email New N-able “4EverAble2Shell” zero-day exploited hours after PoC released skip tracing in 2026: how much can you still do from a desk vs in the field? Several Microsoft services appear to be down – what we know United to block customers from using AI agents, citing cyber threats ‘No One Is Like This:’ Muse Sexts While Roleplaying as Real People ‘Way more terrifying than I expected’ New Trump Rule Threatens Immigrant Families With Separation or Homelessness Kazakh Wealth Fund, Railway Chiefs Detained in Corruption Probe Apache HTTP Server patches critical HTTP/2 remote code execution flaw HomeMaison Data Sale Claim Lists 36.4 Million Records, 1.6M Emails and 330K Plaintext Passwords Roku drops smart home products to focus on streaming – what that means for your devices Shipping giant Maersk says recent cyber incident affected legacy system Attention, Android power users: This app unlocks 30+ features you won’t find in Settings LEGO’s BrickLink taken offline: What users should know Self-hosted Claude Managed Agents keeps agent credentials in your environment Software Samaritan revamps borked Indian certs to block smart TV ads ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories You can force Gemini to forget about you now – how to edit its Memory is there a way to actually find social media profiles via email address? Can anyone help with cheater apps New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Google Wallet just turned your Android phone into a digital house key – how it works How Beginner Creators Can Earn with the Temu Influencer Program This Black Friday GHSA-4g86-54fm-h9h8: Microsoft Security Advisory CVE-2026-118740 – Aspire Security Feature Bypass Vulnerability Google’s Pixel Tag tracker won’t work as well on older Android phones – check our list Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders International operation dismantles malware networks, exposes 6.4 million stolen credentials Home Research & Field Notes