-
OpenSSH released version 10.6 on October 6, 2026, to address security vulnerabilities that affect encrypted sessions, file transfers, authentication, and forwarding controls. This update mitigates a plaintext recovery attack that exploits shared compre…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Elastic published 14 security advisories addressing various vulnerabilities in Elasticsearch, Kibana, and Elastic Agent/Endpoint. Among these, a high-severity Kibana authorization bypass vulnerability allows for cross-tenant data interception. Other is…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Veeam released security updates to address a critical vulnerability that lets low-privileged users execute remote code on Veeam Backup Servers. Identified as CVE-2025-64393, this flaw has a CVSS v4.0 score of 9.4 and was resolved in Veeam Backup & …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical vulnerability exists in WatchGuard endpoint security products that could allow a local, authenticated attacker to bypass driver authentication and access sensitive kernel and process memory. This vulnerability is tracked as CVE-2026-13043 an…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Atlassian has announced a critical vulnerability related to arbitrary file access that affects Jira Software Data Center and Confluence Data Center. This vulnerability, tracked as CVE-2026-21589, has a CVSS score of 9.3 and allows unauthenticated attac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Meet ClingSTUN, a new Linux backdoor that exploits IoT vulnerabilities, gives attackers remote command access and turns infected devices into proxy nodes.
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical heap-buffer-overflow vulnerability in libheif could allow authenticated WordPress users to achieve remote code execution by uploading a specially crafted HEIC image through the standard Media Library workflow. The issue, tracked as GHSA-x8r2…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
MediaTek has released its October 2026 Product Security Bulletin, which addresses 31 vulnerabilities across modem, video, AI processing, display, trusted execution, and system components used in a wide range of its chipsets. The fixes include two criti…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
