[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI

[Virtual Event] Building a Secure AI Strategy for the Enterprise

Visual Studio Code 1.139 (Insiders)

Learn what is new in Visual Studio Code 1.139 (Insiders)

CVE-2026-68772 | ZenML up to 0.94.6 CloudpickleMaterializer cloudpickle_materializer.py cloudpickle.load deserialization

A vulnerability was found in ZenML up to 0.94.6. It has been rated as problematic. Impacted is the function cloudpickle.

CVE-2026-5855 | Contiki-NG LwM2M TLV parser lwm2m-tlv.c lwm2m_tlv_read length out-of-bounds

A vulnerability, which was classified as very critical, has been found in Contiki-NG.

CVE-2026-5856 | Contiki-NG mDNS Resolver resolv.c skip_name out-of-bounds

A vulnerability was found in Contiki-NG. It has been classified as critical.

CVE-2026-53977 | Bohdan Triapitsyn OpenChamber up to 1.11.7 Route bootstrap-runtime.js improper authentication

A vulnerability was found in Bohdan Triapitsyn OpenChamber up to 1.11.7. It has been rated as critical.

CVE-2026-53975 | Bohdan Triapitsyn OpenChamber up to 1.11.7 Command Execution /api/fs/exec spawn os command injection

A vulnerability, which was classified as critical, was found in Bohdan Triapitsyn OpenChamber up to 1.11.7.

CVE-2026-53976 | Bohdan Triapitsyn OpenChamber up to 1.11.7 File Serving /api/fs/read resolveReadPathFromContext allowOutsideWorkspace path traversal

A vulnerability has been found in Bohdan Triapitsyn OpenChamber up to 1.11.7 and classified as critical.

CVE-2026-70617 | Spacebar Server Channels Recipient Endpoint authorization (dcfd910)

A vulnerability marked as critical has been reported in Spacebar Server.

CVE-2026-70618 | Spacebar Server Roles Member-Ids Endpoint improper authorization

A vulnerability classified as problematic has been found in Spacebar Server. This affects an unknown part of the component Roles Member-Ids Endpoint.

CVE-2022-4995 | Weaver Network E-cology up to 10.51 uploaderOperate.jsp secId/plandetailid unrestricted upload

A vulnerability, which was classified as critical, has been found in Weaver Network E-cology up to 10.51.

CVE-2022-44193 | Netgear R7000P 1.3.1.64 /usr/sbin/httpd starthour/startminute /endhour/endminute buffer overflow (EUVD-2022-47143)

A vulnerability labeled as critical has been found in Netgear R7000P 1.3.1.64.

CVE-2022-44191 | Netgear R7000P 1.3.1.64 KEY1/KEY2 buffer overflow (EUVD-2022-47141)

A vulnerability identified as critical has been detected in Netgear R7000P 1.3.1.64. This vulnerability affects unknown code.

CVE-2022-44190 | Netgear R7000P 1.3.1.64 enable_band_steering buffer overflow (EUVD-2022-47140)

A vulnerability categorized as critical has been discovered in Netgear R7000P 1.3.1.64. This affects an unknown part.

CVE-2022-44188 | Netgear R7000P 1.3.0.8 /usr/sbin/httpd enable_band_steering buffer overflow (EUVD-2022-47138)

A vulnerability was found in Netgear R7000P 1.3.0.8. It has been rated as critical.

google-gemini/gemini-cli v0.62.0-nightly.20260917.g6a466a7e2 (17.09.2026)

Release v0.62.0-nightly.20260917.g6a466a7e2 von google-gemini/gemini-cli auf GitHub: Full Changelog…

AI Guardrails: What they Are And Why We Need Them

The power of AI agents is suddenly all over the news. The CEOs of the leading AI companies are discussing slowing down AI development to protect…

CVE-2026-69110 | Microck opencode-studio up to 2.4.3 missing authentication

A vulnerability categorized as critical has been discovered in Microck opencode-studio up to 2.4.3.

CVE-2026-69100 | dromara lamp-cloud up to 5.6.2 GlueFactory os command injection

A vulnerability was found in dromara lamp-cloud up to 5.6.2. It has been declared as very critical.

CVE-2025-71399 | better-auth Better Auth up to 1.4.4 Router privileges management (EUVD-2025-210590)

A vulnerability classified as critical has been found in better-auth Better Auth up to 1.4.4.

CVE-2026-67326 | gitpython-developers GitPython up to 3.1.49 Config Writer config_writer section injection (EUVD-2026-51814 / Nessus ID 331643)

A vulnerability, which was classified as critical, was found in gitpython-developers GitPython up to 3.1.49.

CVE-2026-67309 | Traefik up to 3.7.7 RewriteTarget Middleware path traversal (EUVD-2026-51815)

A vulnerability identified as critical has been detected in Traefik up to 3.7.7.

CVE-2026-20316 | Cisco Secure Firewall Management Center up to 10.0.1 Web Interface information disclosure (EUVD-2026-50404)

A vulnerability was found in Cisco Secure Firewall Management Center. It has been classified as problematic.

I pointed one Eloquent-style client at 62 public APIs. Here's how they answered.

At work I had a lot of external APIs to talk to from Laravel.

OpenAI Launches GPT-6 Astra With a Phased Rollout Across ChatGPT and APIs

OpenAI has publicly released GPT-6 Astra, which it describes as its most capable model to date. The launch is not an immediate, universal switch-on.

[$] LWN.net Weekly Edition for September 17, 2026

Inside this week's LWN.net Weekly Edition: Front: Server-data encryption; PostgreSQL scary patches; Faster kernel builds; BPF for blk-iocost; Lessons…

Wer braucht noch einen Hacker? Schwerins IT-Schutz kann selbst zum Problem werden.

(stm/red) Stellen wir uns eine ganz normale Sitzung der Schweriner Stadtvertretung vor. Ein Tagesordnungspunkt wird aufgerufen, es geht um eine ...

CVE-2026-92592 | craftcms Craft CMS up to 4.18.5/5.10.12 Twig template system redirect (EUVD-2026-81292)

A vulnerability identified as problematic has been detected in craftcms Craft CMS up to 4.18.5/5.10.12.

CVE-2026-92593 | craftcms Craft CMS up to 5.10.12 Redirect renderObjectTemplate returnUrl/redirect special elements in template engine (EUVD-2026-81293)

A vulnerability was found in craftcms Craft CMS up to 5.10.12. It has been rated as critical.

CVE-2026-92594 | Craft CMS up to 5.10.x GraphQL Resolver Gql::canQueryUsers improper authorization (EUVD-2026-81294)

A vulnerability marked as problematic has been reported in Craft CMS up to 5.10.x.

CVE-2026-92595 | Nodemailer up to 9.1.0 Content Resolution MailMessage.resolveContent data/key/callback server-side request forgery (EUVD-2026-81295)

A vulnerability described as critical has been identified in Nodemailer up to 9.1.0. This issue affects the function MailMessage.

CVE-2026-92597 | Nodemailer up to 9.0.x Addressparser lib/addressparser input validation (EUVD-2026-81297)

A vulnerability was found in Nodemailer up to 9.0.x. It has been classified as critical.

CVE-2026-92596 | Nodemailer up to 9.0.x Addressparser resource consumption (EUVD-2026-81296)

A vulnerability was found in Nodemailer up to 9.0.x and classified as problematic.

CVE-2026-92598 | Nodemailer up to 9.0.x Domain Resolver encoding error (EUVD-2026-81298)

A vulnerability labeled as critical has been found in Nodemailer up to 9.0.x. This affects an unknown part of the component Domain Resolver.

CVE-2026-92599 | hapijs joi up to 17.13.6/18.0.0-18.2.5 isoDate Joi.string.isoDate redos (EUVD-2026-81299)

A vulnerability was found in hapijs joi up to 17.13.6/18.0.0-18.2.5. It has been declared as problematic.