Meta announced new features today aimed at cracking down on scams perpetrated via its platforms. First, Meta is launching AI tools for identifying impersonator of brands and celebrities, as well as for detecting deceptive links, which should help it to quickly take down frauds. Second, it is adding new alerts to caution against interacting with a potentially fraudulent account. Facebook will roll out alerts for suspicious friend requests, WhatsApp is getting warnings for device linking requests, and Messenger will also issue warnings if an account seems suspect.

Finally, Meta is also continuing to expand its processes for advertiser verification. The company said it aims to have verified advertisers account for 90 percent of its ads revenue by the end of the year, up from the current share of 70 percent. Last year, Meta estimated that marketing for scams and banned products could have been responsible for 10 percent of its 2024 revenue.

The social media company has been ramping up its actions against scams, particularly those known as celeb bait. Last month, it sued three entities from Brazil and China that were behind scams that leveraged images and deepfakes of popular people to promote dubious products and investment schemes. Meta said today that over the course of 2025, it removed 159 million scam ads as well as 10.9 million Facebook and Instagram accounts tied to criminal scam centers.

Tag

CVE ID

CVE Title

Severity

.NET

CVE-2026-26131

.NET Elevation of Privilege Vulnerability

Important

.NET

CVE-2026-26127

.NET Denial of Service Vulnerability

Important

Active Directory Domain Services

CVE-2026-25177

Active Directory Domain Services Elevation of Privilege Vulnerability

Important

ASP.NET Core

CVE-2026-26130

ASP.NET Core Denial of Service Vulnerability

Important

Azure Arc

CVE-2026-26141

Hybrid Worker Extension (Arc-enabled Windows VMs) Elevation of Privilege Vulnerability

Important

Azure Compute Gallery

CVE-2026-23651

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Critical

Azure Compute Gallery

CVE-2026-26124

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Critical

Azure Compute Gallery

CVE-2026-26122

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Critical

Azure Entra ID

CVE-2026-26148

Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

Important

Azure IoT Explorer

CVE-2026-26121

Azure IOT Explorer Spoofing Vulnerability

Important

Azure IoT Explorer

CVE-2026-23662

Azure IoT Explorer Information Disclosure Vulnerability

Important

Azure IoT Explorer

CVE-2026-23661

Azure IoT Explorer Information Disclosure Vulnerability

Important

Azure IoT Explorer

CVE-2026-23664

Azure IoT Explorer Information Disclosure Vulnerability

Important

Azure Linux Virtual Machines

CVE-2026-23665

Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability

Important

Azure MCP Server

CVE-2026-26118

Azure MCP Server Tools Elevation of Privilege Vulnerability

Important

Azure Portal Windows Admin Center

CVE-2026-23660

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

Important

Azure Windows Virtual Machine Agent

CVE-2026-26117

Arc Enabled Servers – Azure Connected Machine Agent Elevation of Privilege Vulnerability

Important

Broadcast DVR

CVE-2026-23667

Broadcast DVR Elevation of Privilege Vulnerability

Important

Connected Devices Platform Service (Cdpsvc)

CVE-2026-24292

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Important

GitHub Repo: zero-shot-scfoundation

CVE-2026-23654

GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability

Important

Mariner

CVE-2026-23235

f2fs: fix out-of-bounds access in sysfs attribute read/write

Important

Mariner

CVE-2026-23234

f2fs: fix to avoid UAF in f2fs_write_end_io()

Important

Mariner

CVE-2026-3713

pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow

Moderate

Mariner

CVE-2026-23237

platform/x86: classmate-laptop: Add missing NULL pointer checks

Moderate

Mariner

CVE-2026-26017

CoreDNS ACL Bypass

Important

Mariner

CVE-2026-26018

CoreDNS Loop Detection Denial of Service Vulnerability

Important

Mariner

CVE-2026-2297

SourcelessFileLoader does not use io.open_code()

Moderate

Mariner

CVE-2026-0038

In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Important

Mariner

CVE-2026-27601

Underscore.js has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack

Important

Mariner

CVE-2026-23236

fbdev: smscufx: properly copy ioctl memory to kernelspace

Moderate

Mariner

CVE-2026-23865

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

Moderate

Mariner

CVE-2025-71238

scsi: qla2xxx: Fix bsg_done() causing double free

Moderate

Mariner

CVE-2026-3338

PKCS7_verify Signature Validation Bypass in AWS-LC

Important

Mariner

CVE-2026-23231

netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

Important

Mariner

CVE-2026-3381

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

Critical

Mariner

CVE-2026-0031

In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Important

Mariner

CVE-2026-23238

romfs: check sb_set_blocksize() return value

Moderate

Mariner

CVE-2026-3494

MariaDB Server Audit Plugin Comment Handling Bypass

Moderate

Mariner

CVE-2026-3336

PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

Important

Mariner

CVE-2026-0032

In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Important

Microsoft Authenticator

CVE-2026-26123

Microsoft Authenticator Information Disclosure Vulnerability

Important

Microsoft Brokering File System

CVE-2026-25167

Microsoft Brokering File System Elevation of Privilege Vulnerability

Important

Microsoft Devices Pricing Program

CVE-2026-21536

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

Critical

Microsoft Edge (Chromium-based)

CVE-2026-3544

Chromium: CVE-2026-3544 Heap buffer overflow in WebCodecs

Unknown

Microsoft Edge (Chromium-based)

CVE-2026-3540

Chromium: CVE-2026-3540 Inappropriate implementation in WebAudio

Unknown

Microsoft Edge (Chromium-based)

CVE-2026-3536

Chromium: CVE-2026-3536 Integer overflow in ANGLE

Unknown

Microsoft Edge (Chromium-based)

CVE-2026-3538

Chromium: CVE-2026-3538 Integer overflow in Skia

Unknown

Microsoft Edge (Chromium-based)

CVE-2026-3545

Chromium: CVE-2026-3545 Insufficient data validation in Navigation

Unknown

Microsoft Edge (Chromium-based)

CVE-2026-3541

Chromium: CVE-2026-3541 Inappropriate implementation in CSS

Unknown

Microsoft Edge (Chromium-based)

CVE-2026-3543

Chromium: CVE-2026-3543 Inappropriate implementation in V8

Unknown

Microsoft Edge (Chromium-based)

CVE-2026-3539

Chromium: CVE-2026-3539 Object lifecycle issue in DevTools

Unknown

Microsoft Edge (Chromium-based)

CVE-2026-3542

Chromium: CVE-2026-3542 Inappropriate implementation in WebAssembly

Unknown

Microsoft Graphics Component

CVE-2026-25169

Windows Graphics Component Denial of Service Vulnerability

Important

Microsoft Graphics Component

CVE-2026-25180

Windows Graphics Component Information Disclosure Vulnerability

Important

Microsoft Graphics Component

CVE-2026-25168

Windows Graphics Component Denial of Service Vulnerability

Important

Microsoft Graphics Component

CVE-2026-23668

Windows Graphics Component Elevation of Privilege Vulnerability

Important

Microsoft Office

CVE-2026-26110

Microsoft Office Remote Code Execution Vulnerability

Critical

Microsoft Office

CVE-2026-26113

Microsoft Office Remote Code Execution Vulnerability

Critical

Microsoft Office

CVE-2026-26134

Microsoft Office Elevation of Privilege Vulnerability

Important

Microsoft Office Excel

CVE-2026-26144

Microsoft Excel Information Disclosure Vulnerability

Critical

Microsoft Office Excel

CVE-2026-26109

Microsoft Excel Remote Code Execution Vulnerability

Important

Microsoft Office Excel

CVE-2026-26108

Microsoft Excel Remote Code Execution Vulnerability

Important

Microsoft Office Excel

CVE-2026-26107

Microsoft Excel Remote Code Execution Vulnerability

Important

Microsoft Office Excel

CVE-2026-26112

Microsoft Excel Remote Code Execution Vulnerability

Important

Microsoft Office SharePoint

CVE-2026-26105

Microsoft SharePoint Server Spoofing Vulnerability

Important

Microsoft Office SharePoint

CVE-2026-26114

Microsoft SharePoint Server Remote Code Execution Vulnerability

Important

Microsoft Office SharePoint

CVE-2026-26106

Microsoft SharePoint Server Remote Code Execution Vulnerability

Important

Microsoft Semantic Kernel Python SDK

CVE-2026-26030

GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable

Important

Payment Orchestrator Service

CVE-2026-26125

Payment Orchestrator Service Elevation of Privilege Vulnerability

Critical

Push Message Routing Service

CVE-2026-24282

Push message Routing Service Elevation of Privilege Vulnerability

Important

Role: Windows Hyper-V

CVE-2026-25170

Windows Hyper-V Elevation of Privilege Vulnerability

Important

SQL Server

CVE-2026-21262

SQL Server Elevation of Privilege Vulnerability

Important

SQL Server

CVE-2026-26116

SQL Server Elevation of Privilege Vulnerability

Important

SQL Server

CVE-2026-26115

SQL Server Elevation of Privilege Vulnerability

Important

System Center Operations Manager

CVE-2026-20967

System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability

Important

Windows Accessibility Infrastructure (ATBroker.exe)

CVE-2026-25186

Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability

Important

Windows Accessibility Infrastructure (ATBroker.exe)

CVE-2026-24291

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Important

Windows Ancillary Function Driver for WinSock

CVE-2026-25179

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important

Windows Ancillary Function Driver for WinSock

CVE-2026-24293

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important

Windows Ancillary Function Driver for WinSock

CVE-2026-25176

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important

Windows Ancillary Function Driver for WinSock

CVE-2026-25178

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important

Windows App Installer

CVE-2026-23656

Windows App Installer Spoofing Vulnerability

Important

Windows Authentication Methods

CVE-2026-25171

Windows Authentication Elevation of Privilege Vulnerability

Important

Windows Bluetooth RFCOM Protocol Driver

CVE-2026-23671

Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability

Important

Windows Device Association Service

CVE-2026-24296

Windows Device Association Service Elevation of Privilege Vulnerability

Important

Windows Device Association Service

CVE-2026-24295

Windows Device Association Service Elevation of Privilege Vulnerability

Important

Windows DWM Core Library

CVE-2026-25189

Windows DWM Core Library Elevation of Privilege Vulnerability

Important

Windows Extensible File Allocation

CVE-2026-25174

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

Important

Windows File Server

CVE-2026-24283

Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

Important

Windows GDI

CVE-2026-25190

GDI Remote Code Execution Vulnerability

Important

Windows GDI+

CVE-2026-25181

GDI+ Information Disclosure Vulnerability

Important

Windows Kerberos

CVE-2026-24297

Windows Kerberos Security Feature Bypass Vulnerability

Important

Windows Kernel

CVE-2026-26132

Windows Kernel Elevation of Privilege Vulnerability

Important

Windows Kernel

CVE-2026-24289

Windows Kernel Elevation of Privilege Vulnerability

Important

Windows Kernel

CVE-2026-24287

Windows Kernel Elevation of Privilege Vulnerability

Important

Windows MapUrlToZone

CVE-2026-23674

MapUrlToZone Security Feature Bypass Vulnerability

Important

Windows Mobile Broadband

CVE-2026-24288

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

Important

Windows NTFS

CVE-2026-25175

Windows NTFS Elevation of Privilege Vulnerability

Important

Windows Performance Counters

CVE-2026-25165

Performance Counters for Windows Elevation of Privilege Vulnerability

Important

Windows Print Spooler Components

CVE-2026-23669

Windows Print Spooler Remote Code Execution Vulnerability

Important

Windows Projected File System

CVE-2026-24290

Windows Projected File System Elevation of Privilege Vulnerability

Important

Windows Resilient File System (ReFS)

CVE-2026-23673

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Important

Windows Routing and Remote Access Service (RRAS)

CVE-2026-26111

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important

Windows Routing and Remote Access Service (RRAS)

CVE-2026-25173

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important

Windows Routing and Remote Access Service (RRAS)

CVE-2026-25172

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important

Windows Shell Link Processing

CVE-2026-25185

Windows Shell Link Processing Spoofing Vulnerability

Important

Windows SMB Server

CVE-2026-26128

Windows SMB Server Elevation of Privilege Vulnerability

Important

Windows SMB Server

CVE-2026-24294

Windows SMB Server Elevation of Privilege Vulnerability

Important

Windows System Image Manager

CVE-2026-25166

Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability

Important

Windows Telephony Service

CVE-2026-25188

Windows Telephony Service Elevation of Privilege Vulnerability

Important

Windows Universal Disk Format File System Driver (UDFS)

CVE-2026-23672

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Important

Windows Win32K

CVE-2026-24285

Win32k Elevation of Privilege Vulnerability

Important

Winlogon

CVE-2026-25187

Winlogon Elevation of Privilege Vulnerability

Important

A new technique dubbed “Zombie ZIP” helps conceal payloads in compressed files specially created to avoid detection from security solutions such as antivirus and endpoint detection and response (EDR) products.

Trying to extract the files with standard utilities like WinRAR or 7-Zip results in errors or corrupted data. The technique works by manipulating ZIP headers to trick parsing engines into treating compressed data as uncompressed.

Instead of flagging the archive as potentially dangerous, security tools trust the header and scan the file as if it were a copy of the original in a ZIP container.

The “Zombie ZIP” technique was devised by Bombadil Systems security researcher Chris Aziz, who found that it works against 50 of the 51 AV engines on VirusTotal.

“AV engines trust the ZIP Method field. When Method=0 (STORED), they scan the data as raw uncompressed bytes. But the data is actually DEFLATE compressed – so the scanner sees compressed noise and finds no signatures,” the researcher explains.

A threat actor can create a loader that ignores the header and treats the archive for what it is: data compressed using the standard Deflate algorithm used in modern ZIP files.

The researcher has published a proof-of-concept (PoC) on GitHub, sharing sample archives and additional details on how the method works.

To cause popular extraction tools (e.g., 7-Zip, unzip, WinRAR) to generate an error, the researcher says that the CRC value that ensures data integrity has to be set to the uncompressed payload’s checksum.

“However, a purpose-built loader that ignores the declared method and decompresses as DEFLATE recovers the payload perfectly,” Aziz says.

Yesterday, the CERT Coordination Center (CERT/CC) published a bulletin to warn about “Zombie ZIP” and raise awareness of the risks posed by malformed archive files.

While a malformed header may trick security solutions, the agency says that some extraction tools are still able to correctly decompress the ZIP archive.

The CVE-2026-0866 identifier has been assigned for the security issue, which the agency says is similar to a vulnerability disclosed more than two decades ago, CVE-2004-0935, affecting an early version of the ESET antivirus product.

CERT/CC proposes that security tool vendors must validate compression method fields against actual data, add mechanisms to detect inconsistencies in archive structure, and implement more aggressive archive inspection modes.

Users should treat archive files with caution, especially those from unknown contacts, and delete them immediately if their attempts to decompress them end with an “unsupported method” error.

Amazon has secured a temporary win in its fight with Perplexity over the use of AI shopping bots. Bloomberg reported that a San Francisco federal court has determined that Perplexity must stop using its Comet web browser’s AI agent to make purchases for users on Amazon’s marketplace. The AI company will have a week to appeal the decision, otherwise it has been ordered to stop accessing any password-protected areas of Amazon’s systems and destroy its copies of Amazon’s data while the two companies continue to argue their cases.

“Amazon has provided strong evidence that Perplexity, through its Comet browser, accesses with the Amazon user’s permission but without authorization by Amazon, the user’s password-protected account,” District Judge Maxine Chesney wrote in placing the temporary block.

“The preliminary injunction will prevent Perplexity’s unauthorized access to the Amazon store and is an important step in maintaining a trusted shopping experience for Amazon customers,” an Amazon spokesperson told Bloomberg.

Amazon sent a cease-and-desist letter to Perplexity over the AI company’s shopping bots in November. According to Amazon, use of the Comet agent to make purchases is a violation of its terms of service. “Perplexity will continue to fight for the right of internet users to choose whatever AI they want,” a representative from Perplexity said of this week’s decision.

Dash cams have become one of the most sensible additions you can make to a car, and Botslab has spent the past few years building a range that punches well above its weight on resolution, sensors and software.

Spring Deal Days has brought three of the brand’s strongest models down to their lowest prices yet, covering everything from a compact dual-camera setup to a full four-channel system that watches every angle simultaneously.

BOTSLAB G300H Plus 4K Dual Dash Cam

The G300H Plus is the entry point here, but the STARVIS 2 sensor it runs on is anything but entry-level, delivering double the low-light sensitivity and colour accuracy of the standard STARVIS chip found in most cameras at this price. That means you’ll get better footage from wet nights and unlit roads from most cameras around the £80 mark.

Built-in GPS logs your speed, route, and location into every clip, the 5GHz Wi-Fi transfers footage to the Botslab app in seconds. There’s also voice commands, which let you snap a photo or start recording without lifting your hands from the wheel.

Advertisement

And now, thanks to the Spring Deal Days, you can pick the G300H up for just £89.98 – down from £119.99.

Advertisement

The BOTSLAB G300H Plus 4K Dual Dash Cam is now jst £89.98 during Amazon’s Spring Deal Days

View Deal

BOTSLAB 4K Front and 2K Rear Dual Dash Cam

This model steps things up by pairing a 4K front camera with a dedicated 2K rear unit, so you get sharp coverage of what is happening both in front and behind the car, with a six-layer F1.5 aperture lens that pulls in enough light to capture license plates clearly at 15 metres.

Advertisement

It’s also the only camera in this roundup with a full ADAS suite, adding lane departure warnings, forward collision alerts, close-following reminders, and a two-hour fatigue prompt that nudges you to pull over and rest.

The super capacitor design also means it handles extreme temperatures in both the winter and summer.

The camera is currently down to £89.98 in the sale, down from £129.99.

Save £50 on the BOTSLAB 4K Front and 2K Rear Dual Dash Cam

View Deal

Advertisement

Advertisement

BOTSLAB G980H 3K Four-Channel Dash Cam

The G980H is the most comprehensive of the three dash cams, running four 3k cameras simultaneously to cover 560 degrees.

Its Sentry parking mode goes further than most – triggering the moment someone edges close to the car rather than waiting for an impact. It also pre-records and stores eight seconds of footage before a G-sensor event fires, giving you the full picture of any incident rather than just the aftermath.

And with wa 128GB card included, you can get the camera up and running without any additional costs.

Advertisement

The G980H is available for £179.99, down from £219.99.

Save 18% on a BOTSLAB G980H 3K Four-Channel Dash Cam during Amazon’s Spring Deal Days

View Deal

All three cameras are discounted until March 16, so you’ll need to be quick to pick one up in the sale.

Advertisement

Advertisement