ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 270/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 02:26 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 44 · 26 Oct – 26 Oct 2026 UTC · assess the changes, then plan the next dates.

All dated changes in this period

37 source records · 37 groups
Clear list filters

Updates and guidanceDefender

Defender for Identity sensor prerequisites

Guidance changed

1 new passage (about 50 words). The changed wording mentions dates and deadlines, supported platforms. Review the source to confirm the effect.

Assessment context

1 new passage (about 50 words). The changed wording mentions dates and deadlines, supported platforms. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

SecurityDefault mimetype known files writeable on Windows

Default mimetype known files writeable on Windows

Affected-version evidence changed

CVE-2024-3220

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecurityDistrust compromised intermediate certificates in ssl module

Distrust compromised intermediate certificates in ssl module

Affected-version evidence changed

CVE-2026-115557

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in @regex33-hackerone/tb-compat (npm)

Malicious code in @regex33-hackerone/tb-compat (npm)

Newly collected advisory

MAL-2026-18310

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in @s4yhiitestpoc/r2-control (npm)

Malicious code in @s4yhiitestpoc/r2-control (npm)

Newly collected advisory

MAL-2026-18302

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in @s4yhiitestpoc/r2-dns (npm)

Malicious code in @s4yhiitestpoc/r2-dns (npm)

Newly collected advisory

MAL-2026-18303

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in @s4yhiitestpoc/r2-echo (npm)

Malicious code in @s4yhiitestpoc/r2-echo (npm)

Newly collected advisory

MAL-2026-18304

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in @s4yhiitestpoc/r2-https-b (npm)

Malicious code in @s4yhiitestpoc/r2-https-b (npm)

Affected-version evidence changed

MAL-2026-17808

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in @s4yhiitestpoc/scan-control-a (npm)

Malicious code in @s4yhiitestpoc/scan-control-a (npm)

Newly collected advisory

MAL-2026-18306

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in @s4yhiitestpoc/scan-dns-c (npm)

Malicious code in @s4yhiitestpoc/scan-dns-c (npm)

Newly collected advisory

MAL-2026-18307

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in @s4yhiitestpoc/scan-echo-b (npm)

Malicious code in @s4yhiitestpoc/scan-echo-b (npm)

Newly collected advisory

MAL-2026-18308

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in @s4yhiitestpoc/scan-https-d (npm)

Malicious code in @s4yhiitestpoc/scan-https-d (npm)

Affected-version evidence changed

MAL-2026-17766

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in ap3-foundations-ui (npm)

Malicious code in ap3-foundations-ui (npm)

Affected-version evidence changed

MAL-2026-17806

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in bow-test (npm)

Malicious code in bow-test (npm)

Newly collected advisory

MAL-2026-18311

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in brass-common (npm)

Malicious code in brass-common (npm)

Affected-version evidence changed

MAL-2026-17849

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in css-flexgap-shim (npm)

Malicious code in css-flexgap-shim (npm)

Newly collected advisory

MAL-2026-18312

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in css-grid-snap-util (npm)

Malicious code in css-grid-snap-util (npm)

Newly collected advisory

MAL-2026-18313

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in css-hnhxwd-polyfill (npm)

Malicious code in css-hnhxwd-polyfill (npm)

Newly collected advisory

MAL-2026-18314

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in css-overscroll-contain (npm)

Malicious code in css-overscroll-contain (npm)

Affected-version evidence changed

MAL-2026-17705

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecurityMalicious code in monitoring-agent (npm)

Malicious code in monitoring-agent (npm)

Affected-version evidence changed

MAL-2026-17515

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 02:26 UTC · 270 of 271 readable · 268 fully read · documentation 464/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.