ADMIN.FOUNDATION – Page 19 – cybersecurity / defense / intelligence

Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet

·

cyber security, Cyber Security News, Microsoft, vulnerability, Zero-Day, zeroday

Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single malicious DFS referral response. This vulnerability, tracked as CVE-2026-70111, affects Windows Server versions 2019, 2022, and 2025. According to Corelight’s disclosure on October 13, Microsoft addressed the flaw in its October 2026 updates. Notably, there […]

The post Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws

·

Chrome, CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October 13, 2026, this desktop update resolves weaknesses across various browser components, including graphics, networking, PDF processing, media, and JavaScript execution. The update includes seven critical vulnerabilities, 29 high-severity issues, and one medium-severity vulnerability, making […]

The post Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft

·

AI, Anthropic, Artificial Intelligence, cybersecurity, Google, LiteLLM, OpenAI, Security, vulnerability

Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fake WatchGuard VPN Site Steals Credentials Then Delivers Legitimate Signed Installer

·

cyber security, Cyber Security News

A WatchGuard VPN impersonation attack that steals connection credentials in the browser before delivering the vendor’s genuine, digitally signed installer. The campaign removes the malicious executable from the download chain, leaving victims with legitimate software. At the same time, attackers collect information needed to attempt unauthorized VPN access. The lure, watchguard-vpn[.]net, impersonated a WatchGuard Mobile […]

The post Fake WatchGuard VPN Site Steals Credentials Then Delivers Legitimate Signed Installer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Windows BitLocker Vulnerabilities Could Allow Attackers to Bypass Security Protections and Escalate Privileges

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability, Windows

Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections under various access conditions. Microsoft is the assigning authority, with a release date of October 13, 2026, and all three vulnerabilities are rated Important. Two require existing local privileges, while the third requires physical access. We […]

The post Windows BitLocker Vulnerabilities Could Allow Attackers to Bypass Security Protections and Escalate Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote, unauthenticated attackers to execute arbitrary commands. The company disclosed the issue on October 13, 2026. It confirmed that exploitation had affected a limited number of customers at the time of disclosure. Fixed software versions are […]

The post Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication

·

cyber security, Cyber Security News, zeroday

Attackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then searched the affected network for credentials and sensitive Active Directory data. Volexity attributed the activity to an unknown threat actor it tracks as UTA0576, which repeatedly exploited an appliance running version 22.8R2.4, Build 19097 the […]

The post Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Zoom Certificate Validation Vulnerability Allows Attackers to Access Sensitive Information

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked as CVE-2026-108185, could allow an unauthenticated attacker with network access to disclose sensitive information. On October 13, 2026, Zoom published security bulletin ZSB-26022, which identifies the vulnerable releases across Windows, macOS, Linux, Android, and iOS, […]

The post Zoom Certificate Validation Vulnerability Allows Attackers to Access Sensitive Information appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update

·

AI, cybersecurity, Microsoft, Patch Tuesday, Security, vulnerability, Windows

Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly…

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images

·

CVE/vulnerability, cyber security, Cyber Security News, Vulnerabilities, vulnerability

Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as CVE-2026-105445 and dubbed GhostPat, exploited how Docker handled personal access tokens during account conversions. Depending on token permissions, it could enable unauthorized image downloads, malicious image uploads, and repository image deletions. Docker […]

The post Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶