Current Issues
Selected recent IT announcements and security advisories with practical operational context. Each article records its announcement reference date and verification date. Also covers Bitcoin markets, ETFs, corporate disclosures, mining and custody.
-
Ubuntu 26.10 curl Security Update: Include libcurl Consumers in the Review
Ubuntu published USN-8927-2 for curl on 26.10. Check package builds, bundled libraries, dependent applications, and container images rather than the command alone.
-
Eight eMudhra Intermediate Certificates: Check Trust Stores Beyond the Browser
Cloudflare disclosed a key compromise affecting eight eMudhra intermediate certificates. Review trust updates in operating systems, containers, applications, and long-running processes.
-
Cloudflare WAF Adds Request-and-Response Inspection: Blocking Is Not Rollback
Cloudflare announced full-transaction detection and response rules. Understand what blocking a response can prevent and what may already have happened at the origin.
-
Cloudflare PQ GeoKey Manager Enters Closed Beta: Keys Are One Location Boundary
Cloudflare announced a closed beta for PQ GeoKey Manager. Distinguish geographic key-use restrictions from traffic routing, plaintext processing, and logging locations.
-
Docker Hub PAT Reassignment Flaw: Separate the Fix Date from the Impact
Docker disclosed CVE-2026-105445 in account-to-organization conversion. Review the fixed incident’s registry scope and targeted notifications rather than assuming universal account takeover.
-
Microsoft Expands Local AI Agent Discovery: Inventory Is Only the Start
Microsoft announced broader discovery, agent identity, and dynamic permission capabilities. Connect the agent inventory to owners, runtime accounts, and enforceable access boundaries.
-
ConnectWise App Identity Abuse: Review Microsoft 365 Service Principals
Microsoft analyzed Storm-0940 abuse of ConnectWise OAuth identities. Distinguish installed apps from proven data exposure and review service-principal sign-ins and credential changes.
-
Cloudflare Origin Range Requests Improves Partial-File Caching
Cloudflare announced self-service Origin Range Requests across plans. Evaluate partial downloads using origin bytes, response correctness, and user latency rather than cache hits alone.
-
Project Tessera: Understand the Scope of Open Integrated HSMs
Microsoft announced Project Tessera with Marvell, Oracle, and OCP participation. Separate published designs and firmware from future silicon work and review operational key boundaries.