-
Hackers are exploiting a command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite. This vulnerability allows attackers to compromise internet-facing email servers without any user interaction. Microsoft Threat Intelligence has…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single malicious DFS referral response. This vulnerability, tracked as CVE-2026-70111, affects Windows Server vers…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October 13, 2026, this desktop update resolves weaknesses across various browser components, including gr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections under various access conditions. Microsoft is the assigning authority, with a release date of October …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote, unauthenticated attackers to execute arbitrary commands. The company dis…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked as CVE-2026-108185, could allow an unauthenticated attacker with network access to disclose sensitive information…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as CVE-2026-105445 and dubbed GhostPat, exploited how Docker handled personal access tokens during ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
