-
Hackers are exploiting a command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite. This vulnerability allows attackers to compromise internet-facing email servers without any user interaction. Microsoft Threat Intelligence has…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October 13, 2026, this desktop update resolves weaknesses across various browser components, including gr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections under various access conditions. Microsoft is the assigning authority, with a release date of October …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote, unauthenticated attackers to execute arbitrary commands. The company dis…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked as CVE-2026-108185, could allow an unauthenticated attacker with network access to disclose sensitive information…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as CVE-2026-105445 and dubbed GhostPat, exploited how Docker handled personal access tokens during ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Critical FortiSandbox Vulnerability Lets Remote Attackers Bypass Authentication and Execute Commands
Fortinet has disclosed a critical authentication bypass vulnerability in FortiSandbox that could let remote attackers access its web management interface without valid credentials and execute unauthorized code or commands. This vulnerability is tracked…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that enterprise defenders must address immediately. This unusually large update cycle affects various Mic…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
SAP’s Security Patch Day on October 13, 2026, addresses critical vulnerabilities found in enterprise applications, integration platforms, and developer libraries. The October bulletin details the release, which includes 16 new security notes, four GitH…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors are exploiting two critical zero-day vulnerabilities in Citrix NetScaler to deploy a modified version of the open-source Platypus remote administration framework on compromised Application Delivery Controller (ADC) and Gateway appliances….
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶