UGREEN a étoffé sa gamme Nexode Pro avec un chargeur mural de 160 watts et un chargeur de bureau de 300 watts. Ils ont le droit à un écran intelligent.

Le post UGREEN Nexode Pro : deux chargeurs avec écran intelligent, dont un que j’ai pris en main a été publié sur IT-Connect.

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.

FortiSwitchAXChassis 1.1.2 B0135 and release notes are available for download from the Support site : https://support.fortinet.com

Maîtrisez le licensing Microsoft: contrats, comptes de facturation et familles M365 pour éviter les coûts cachés et les migrations surprises.

Le post Comprendre le licensing Microsoft : contrats, familles et canaux d’achats a été publié sur IT-Connect.

Le 14 septembre 2026, les scripts Brevo intégrés aux sites de ses clients ont diffusé une attaque ClickFix et une backdoor WordPress. Voici ce que l'on sait.

Le post Brevo : des scripts ClickFix injectés sur les sites de ses clients, avec une backdoor pour WordPress a été publié sur IT-Connect.

TrueNAS avance bien sur son plugin de stockage natif pour Proxmox VE : provisionnement automatique des disques de VM, snapshots ZFS, iSCSI et NVMe/TCP.

Le post TrueNAS lance son plugin de stockage officiel pour Proxmox VE a été publié sur IT-Connect.

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.

Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.