tsecurity.de - News Radar & Live Feeds

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Thu, 15 Oct 2026 23:30:02 +0200

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...] Weiterlesen

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

Thu, 15 Oct 2026 22:28:05 +0200

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog:... Weiterlesen

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

Thu, 15 Oct 2026 22:19:11 +0200

Surge in Exploits Targeting Langflow's Critical RCE Flaw

Thu, 15 Oct 2026 19:27:39 +0200

Recent reports reveal a significant uptick in exploit attempts aimed at a critical authenticated remote code execution (RCE) flaw in Langflow, a tool gaining popularity among developers and enterprises. With an alarming total of 1,423 attempts detected, the urgency for effective security measures around this platform cannot be overstated. This... Weiterlesen

Critical ChatGPT GitHub Connector Flaw Could Allow Attackers to Steal Private Repository Secrets

Thu, 15 Oct 2026 18:37:24 +0200

A critical flaw in ChatGPT’s GitHub integration has the potential to turn a routine repository review into a secret-theft attack. A report published on October 15, 2026, describes a scenario in which manipulated repository instructions allegedly lead an AI agent to modify a different private repository and trigger GitHub Actions. According to the... Weiterlesen

Critical Flaws in LG Smart TVs Could Allow Hackers to Gain Root Access Over Local Networks

Thu, 15 Oct 2026 18:35:32 +0200

Three security vulnerabilities in LG's webOS operating system could allow attackers to gain complete control of certain LG smart TVs without authentication or any action from the owner. The flaws can be combined to obtain root access when an attacker is connected to the same local network as the television. LG has released a firmware fix for the... Weiterlesen

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

Thu, 15 Oct 2026 18:29:01 +0200

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted... Weiterlesen

Bank of America had to hire 1,000 contractors to patch software flaws spotted by Anthropic Mythos

Thu, 15 Oct 2026 18:25:54 +0200

Bank of America hired 1,000 contractors and spent hundreds of millions fixing AI-discovered vulnerabilitiesAnthropic’s Mythos uncovered enough flaws to trigger large-scale remediation across major banksFinancial institutions warn advanced AI security tools are exposing weaknesses faster than teams can patch themBank of America, one of the largest... Weiterlesen

Palo Alto Warns of PAN-OS 0-day Flaw Actively Exploited in Attacks

Thu, 15 Oct 2026 17:30:43 +0200

Palo Alto Networks has warned that attackers are exploiting a high-severity remote code execution flaw in the PAN-OS management interface. Tracked as CVE-2026-0322, the bug lets an authenticated attacker with network access run arbitrary code with root privileges on the firewall. PAN-OS zero-day vulnerability The flaw is a code injection weakness... Weiterlesen

Update Chrome: Google fixes 37 security flaws, including seven critical bugs

Thu, 15 Oct 2026 17:25:46 +0200

Some flaws could let attackers run malicious code on your device through a crafted webpage. This article has been indexed from Malwarebytes Read the original article: Update Chrome: Google fixes 37 security flaws, including seven critical bugs The post Update Chrome: Google fixes 37 security flaws, including seven critical bugs appeared first on... Weiterlesen

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Thu, 15 Oct 2026 17:18:00 +0200

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG... Weiterlesen

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

Thu, 15 Oct 2026 17:18:00 +0200

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit. A fourth lets an... Weiterlesen

Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix

Thu, 15 Oct 2026 14:34:42 +0200

Attackers are exploiting a newly disclosed flaw in Palo Alto Networks’ PAN-OS firewall software to run code with root privileges, and US federal agencies have been ordered to fix it and check for compromise by October 17. Palo Alto Networks disclosed the vulnerability, tracked as CVE-2026-0322, in a security advisory published October 14. The flaw... Weiterlesen

Cisco warns of actively exploited Secure Email Gateway flaw

Thu, 15 Oct 2026 14:34:40 +0200

A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is being exploited in the wild. The flaw affects the product’s Advanced... Weiterlesen

Largest-ever food destruction cyber-attack, Microsoft patches 1,411 flaws, Drones knock out Russia’s Yandex

Thu, 15 Oct 2026 14:33:41 +0200

French Supermarket Freezers Turned to Ovens, Ahold Delhaize Outage, Microsoft's 1,411-Fix Patch Tuesday, AI Worm Debate, and Drones Hit Yandex Cloud Cybersecurity Today host David Shipley reports on a wave of attacks that pushed refrigeration controllers at hundreds of French supermarket stores up to 50°C, sparking fires and spoiling food, with... Weiterlesen

LiteLLM flaws allow full admin control and API-key theft

Thu, 15 Oct 2026 14:25:42 +0200

Two critical flaws in one of the most widely-used LLM gateways, LiteLLM, could let low-privilege users execute code, hijack admin accounts, and steal AI provider API keys. With 97 million downloads per month and more than 59,000 GitHub stars, LiteLLM runs inside large enterprises, startups and many of the platforms used to build AI applications.It... Weiterlesen

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Thu, 15 Oct 2026 14:23:58 +0200

Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several exploit paths exist through contributed modules,... Weiterlesen

SAP Patches Critical CVSS 10.0 Flaw in Cloud SDK for Python

Thu, 15 Oct 2026 13:37:25 +0200

SAP released its October 2026 security patch on Tuesday, October 13, delivering 22 new and updated security notes. Four of them address critical-severity vulnerabilities. The most severe is CVE-2026-89111, a maximum-rated flaw in the Cloud SDK for Python. Several of the bugs could allow attackers to invoke internal operations or execute code,... Weiterlesen

Multiple Citrix UniconOS and XenServer Flaws Let Attackers Escalate Privileges and Compromise Hosts

Thu, 15 Oct 2026 13:36:57 +0200

Citrix disclosed seven vulnerabilities in UniconOS and XenServer that could enable local privilege escalation, persistent command execution, arbitrary file access, and compromise of virtualization hosts. Two security bulletins published on October 13, 2026, describe distinct attack scenarios affecting endpoint operating systems and virtualization... Weiterlesen

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

Thu, 15 Oct 2026 13:33:17 +0200

The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS CVE-2026-76519, a critical relative path traversal vulnerability in... Weiterlesen

Bank of America hired 1,000 security consultants to address Mythos-spotted flaws

Thu, 15 Oct 2026 13:32:55 +0200

How many security professionals does it take to clean up the flaws found by AI? About a third more than you've got now. That's how many more security professionals and other third-party consultants Bank of America has temporarily hired in order to work through the patches and other fixes necessary to address vulnerabilities spotted by Anthropic's... Weiterlesen

Bank of America Hired 1,000 Contractors to Patch Software Flaws Exposed By Anthropic's Mythos

Thu, 15 Oct 2026 13:31:07 +0200

Bank of America hired 1,000 outside contractors to help patch software vulnerabilities exposed by advanced AI models, including Anthropic's Mythos. The effort added hundreds of millions of dollars in third-quarter expenses. CNBC reports: In an interview after the bank's third-quarter earnings release, [CEO Brian Moynihan] said that earlier this... Weiterlesen

Microsoft Windows Server 0-Day Flaw Lets Attackers Crash Servers With a Single Packet

Thu, 15 Oct 2026 12:34:56 +0200

Microsoft patched a Windows Server vulnerability that lets a network-adjacent attacker crash a server with a crafted Distributed File System (DFS) referral response. Tracked as CVE-2026-70111, the flaw affects Windows Server 2019, 2022, and 2025. Corelight researchers reported the issue after finding it while testing Microsoft Remote Procedure... Weiterlesen

PoC Exploit Code Released for Fortinet FortiClient EMS Authentication Bypass Flaw

Thu, 15 Oct 2026 12:34:29 +0200

A public proof-of-concept (PoC) exploit is now available for CVE-2026-35616, a critical authentication bypass in Fortinet FortiClient Endpoint Management Server (EMS). The flaw has been exploited in the wild since spring 2026. FortiClient EMS authentication bypass According to details published by GitHub user Alaatk, a repository titled... Weiterlesen

Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise

Thu, 15 Oct 2026 12:17:29 +0200

Attackers exploit a critical Cisco email gateway flaw to gain root access. Cisco urges customers to update scanner tools and check for compromise. Cisco confirmed this week that threat actors are exploiting a critical vulnerability in Cisco Secure Email Gateway, tracked as CVE-2026-76519 with a CVSS score of 9.8. An attacker can exploit the flaw... Weiterlesen

Langflow’s Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Thu, 15 Oct 2026 11:37:07 +0200

Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question... Weiterlesen

UAT-6275 Hackers Exploit WinRAR Flaw to Target CIS Government Organizations

Thu, 15 Oct 2026 11:37:05 +0200

UAT-6275 hackers have used a known WinRAR flaw to plant malware on Windows systems while targeting government organizations across the Commonwealth of Independent States (CIS). The activity shows how an unpatched archive tool can turn a routine attachment into lasting remote access, with the malicious program starting when the victim next signs... Weiterlesen

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Thu, 15 Oct 2026 11:30:27 +0200

Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep authentication and execute arbitrary commands on... Weiterlesen

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Thu, 15 Oct 2026 11:30:27 +0200

Update Windows: Record Patch Tuesday fixes flaw already under attack

Thu, 15 Oct 2026 09:30:45 +0200

Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws. Just when you thought a previous record would stand for a while, Microsoft comes out again with the largest monthly Patch Tuesday release. Microsoft has said its... Weiterlesen

Google DevSite Flaw Exposed Secret That Enabled Remote Code Execution

Thu, 15 Oct 2026 09:30:01 +0200

Google DevSite flaw allowed forged Flask sessions to execute code without login. Learn how it worked, when Google fixed it, and what developers should check. Weiterlesen

Microsoft’s October Patch Tuesday Fixes More Than 1,400 Flaws

Thu, 15 Oct 2026 09:29:56 +0200

Microsoft’s October Patch Tuesday fixes over 1,400 flaws, including an exploited Windows bug. Learn which vulnerabilities security teams should patch first. Weiterlesen

SAP Patches Critical S/4HANA Flaw: What Security Teams Should Check

Thu, 15 Oct 2026 09:29:55 +0200

SAP's October update fixes a critical S/4HANA code injection flaw and NetWeaver memory corruption. See affected systems, risks, and patching priorities. Weiterlesen

Blueberry Pediatrics discloses health data theft through Metabase flaw

Thu, 15 Oct 2026 09:29:51 +0200

Blueberry Medical has disclosed a data breach in which an attacker exploited a Metabase vulnerability to steal patient information, including children’s medical records and health insurance details. The healthcare provider discovered the unauthorized access on August 22, 2026. A separate public statement places the initial intrusion on August 10,... Weiterlesen

Over 1,500 npm packages exposed by Trusted Publishing validation flaw

Thu, 15 Oct 2026 09:29:07 +0200

A flaw in npm’s Trusted Publishing mechanism could allow attackers to hijack legitimate software packages by reclaiming abandoned GitHub repository names, potentially exposing millions of package downloads to supply-chain attacks. Researchers at Bloom Security identified more than 1500 potentially vulnerable npm packages, including security... Weiterlesen

GitLab patches a max-severity regex flaw alongside five high-severity bugs

Thu, 15 Oct 2026 09:29:05 +0200

GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on its servers. The company released a fix on Monday, alongside patches for five other high-severity flaws affecting its source code management and continuous integration and delivery (CI/CD) platform. The vulnerability, tracked as... Weiterlesen

LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys

Thu, 15 Oct 2026 09:29:01 +0200

Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers such as OpenAI, Anthropic and Google. The flaws could allow a user with minimal privileges to take full control of the gateway, read sensitive files, execute arbitrary code and harvest the... Weiterlesen

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws

Thu, 15 Oct 2026 09:28:59 +0200

This Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report covers two views of risk: what attackers tried against Cyble's global honeypot sensors, and what the Cybersecurity and Infrastructure Security Agency (CISA) disclosed for industrial control systems (ICS). The Cyble Global Sensor Intelligence (CGSI) network observed... Weiterlesen

Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft

Thu, 15 Oct 2026 09:28:54 +0200

Check Point Research found two LiteLLM vulnerabilities that could let low-privilege users execute code, access sensitive files, hijack admin accounts, and steal AI provider API keys. Weiterlesen

Dangerous flaws in refrigeration equipment were disclosed months before retail attacks

Thu, 15 Oct 2026 09:28:49 +0200

Hundreds of French supermarkets faced a sophisticated cyberattack, allowing hackers to manipulate industrial controls. Weiterlesen

Windows Server Zero-Day Flaw Lets Attackers Crash Systems With a Single Malicious Packet

Thu, 15 Oct 2026 09:28:47 +0200

A newly disclosed Windows Server zero-day vulnerability lets attackers with network access crash affected systems with a single malicious Distributed File System (DFS) referral response. Tracked as CVE-2026-70111, the flaw affects Windows Server 2019, 2022, and 2025. Corelight says Microsoft released fixes on October 13 through its October 2026... Weiterlesen

GitHub bremst npm Trusted Publishing: 48‑Stunden-Validierung nach Flaw

Thu, 15 Oct 2026 09:28:42 +0200

LONDON (IT BOLTWISE) – GitHub verkürzt das Risiko bei npm Trusted Publishing spürbar: Neue Trusted-Publisher-Konfigurationen müssen nach Erstellung innerhalb von 48 Stunden den ersten erfolgreichen Publish abschließen. Danach bindet GitHub die Konfiguration an eine „repository’s immutable identity“ und macht das Setup gegen das Ausnutzen von... Weiterlesen

Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code

Thu, 15 Oct 2026 09:28:26 +0200

F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers crash worker processes by sending crafted HTTP requests. In certain setups, the memory errors could also allow code execution, although F5 says that outcome requires Address Space Layout Randomization, known as ASLR, to... Weiterlesen

Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls

Thu, 15 Oct 2026 09:28:25 +0200

Hackers are exploiting a high-severity flaw in Palo Alto Networks PAN-OS that allows authenticated attackers to run code with root privileges on affected firewalls. Tracked as CVE-2026-0322, the vulnerability affects the management interface, with the company confirming “very limited exploitation” and urging customers to apply fixes as soon as... Weiterlesen

LG Smart TVs Pre-Auth Root Takeover Flaw

Thu, 15 Oct 2026 09:28:19 +0200

Security researchers have discovered a critical vulnerability chain in LG's webOS operating system that allows attackers to take complete control of affected smart TVs. This article has been indexed from CyberMaterial Read the original article: LG Smart TVs Pre-Auth Root Takeover Flaw The post LG Smart TVs Pre-Auth Root Takeover Flaw appeared... Weiterlesen

Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

Thu, 15 Oct 2026 09:22:41 +0200

Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position. Weiterlesen

Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat

Thu, 15 Oct 2026 09:22:40 +0200

A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens. Weiterlesen

Microsoft Patches More Than 1,400 Security Flaws

Thu, 15 Oct 2026 09:22:38 +0200

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Just one of the weaknesses patched this week is considered a... Weiterlesen

Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

Thu, 15 Oct 2026 09:21:32 +0200

Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...] Weiterlesen

Ghostscript flaw lets hackers hijack servers via PDF uploads

Thu, 15 Oct 2026 09:21:31 +0200

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...] Weiterlesen

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

Thu, 15 Oct 2026 09:21:31 +0200

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...] Weiterlesen

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Thu, 15 Oct 2026 09:21:24 +0200

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...] Weiterlesen

TU Graz Uncovers Major Security Flaws in Data Migration Tools

Thu, 15 Oct 2026 09:21:04 +0200

The standard data migration tools offered by major Android manufacturers such as Samsung, Google and Xiaomi pose significant security risks, as ... Weiterlesen

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

Thu, 15 Oct 2026 09:20:49 +0200

Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek. Weiterlesen

ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw

Thu, 15 Oct 2026 09:20:48 +0200

ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability. The post ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw appeared first on SecurityWeek. Weiterlesen

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

Thu, 15 Oct 2026 09:20:07 +0200

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a... Weiterlesen

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

Thu, 15 Oct 2026 09:20:07 +0200

Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic... Weiterlesen

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

Thu, 15 Oct 2026 09:19:50 +0200

GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal their credentials. "Your configuration becomes validated and exempt from expiry after its first... Weiterlesen

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

Thu, 15 Oct 2026 09:19:50 +0200

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to... Weiterlesen

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

Thu, 15 Oct 2026 09:19:50 +0200

A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal account into an organization, Docker said in a security... Weiterlesen

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

Thu, 15 Oct 2026 09:19:48 +0200

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Server. Of these, more than 670 relate to privilege... Weiterlesen

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

Thu, 15 Oct 2026 09:19:39 +0200

A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine. The bug is tracked as CVE-2026-74580 and named Vghost.... Weiterlesen

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

Thu, 15 Oct 2026 09:19:38 +0200

A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact knowledge of its build and memory layout, and curl... Weiterlesen

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

Thu, 15 Oct 2026 09:19:17 +0200

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an attacker sends via a web request, with the rights of... Weiterlesen

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Thu, 15 Oct 2026 09:19:16 +0200

Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. "A remote code execution (RCE) vulnerability in the management interface of Palo... Weiterlesen

Microsoft Patch Tuesday Fixes 1,413 Flaws: Windows Zero-Day Already Under Attack

Thu, 15 Oct 2026 09:12:18 +0200

Microsoft's October 2026 Patch Tuesday fixes 1,413 vulnerabilities, including an exploited Windows zero-day and critical Outlook security flaws. The post Microsoft Patch Tuesday Fixes 1,413 Flaws: Windows Zero-Day Already Under Attack appeared first on TechRepublic. Weiterlesen

Security flaws found in top open source AI gateway — LiteLLM vulnerabilties could affect millions of users

Thu, 15 Oct 2026 09:12:10 +0200

Two LiteLLM flaws let low-privileged users gain administrative control and execute malicious codeAttackers could also steal AI provider API keys through a server-side request forgery bugOrganizations should upgrade to LiteLLM 1.83.9+ and rotate potentially exposed credentialsSecurity researchers recently discovered two vulnerabilities in a popular... Weiterlesen

Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution

Thu, 15 Oct 2026 08:56:14 +0200

Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote, unauthenticated attackers to execute arbitrary commands. The company disclosed the issue on October 13, 2026. It confirmed that exploitation had affected a limited... Weiterlesen

Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws

Thu, 15 Oct 2026 08:56:13 +0200

Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October 13, 2026, this desktop update resolves weaknesses across various browser components, including graphics, networking, PDF processing, media, and JavaScript execution. The update includes seven... Weiterlesen

Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet

Thu, 15 Oct 2026 08:56:13 +0200

Corelight researchers have disclosed a Windows Server vulnerability that lets attackers with network access crash affected systems with a single malicious DFS referral response. This vulnerability, tracked as CVE-2026-70111, affects Windows Server versions 2019, 2022, and 2025. According to Corelight’s disclosure on October 13, Microsoft addressed... Weiterlesen

U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog

Thu, 15 Oct 2026 08:56:03 +0200

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Ivanti Connect Secure FortiMail flaw, tracked as CVE-2026-104935 (CVSS score of 8.6), to its Known Exploited Vulnerabilities (KEV)... Weiterlesen

U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog

Thu, 15 Oct 2026 08:56:00 +0200

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Microsoft Windows Shell flaw, tracked as CVE-2026-96951 (CVSS score of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog.... Weiterlesen

Maximum-severity SonicWall flaw is now under active exploitation.

Mon, 12 Oct 2026 21:45:25 +0200

FBI fires a contractor over ShinyHunters data breach. US Justice Department disrupts China-linked hacking tools. Weiterlesen

Samsung Galaxy S26 Hacked Again as Pwn2Own Researchers Find More Flaws

Mon, 12 Oct 2026 21:44:20 +0200

Samsung's Galaxy S26 was hacked repeatedly at Pwn2Own Ireland. Learn what researchers found, why exploit chains matter and what users should know. Weiterlesen

Ahsay Confirms Failed Patch for Two Exploited Backup Flaws

Mon, 12 Oct 2026 21:44:11 +0200

Ahsay released an emergency hotfix after its earlier AhsayCBS patch failed to resolve two actively exploited vulnerabilities affecting backup servers. Weiterlesen

Cisco Meraki Security Update Fixes Critical Flaws, With Some Patches Still Pending

Mon, 12 Oct 2026 21:44:08 +0200

Cisco disclosed seven Meraki vulnerabilities affecting six product families. Some firmware fixes are available, while others remain scheduled for October and November. Weiterlesen

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

Mon, 12 Oct 2026 21:43:43 +0200

Ravie LakshmananOct 03, 2026Vulnerability / Critical Infrastructure The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and... Weiterlesen

Attackers exploit AhsayCBS backup flaws to deploy disguised crypto miners

Mon, 12 Oct 2026 21:43:01 +0200

Attackers are exploiting two newly disclosed vulnerabilities in AhsayCBS, the management console for Ahsay’s cloud backup software, to take over servers and quietly run cryptocurrency miners, according to researchers at Huntress. AhsayCBS (Cloud Backup Server) is mainly used by managed service providers (MSPs) and system integrators to create... Weiterlesen

IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws

Mon, 12 Oct 2026 21:42:49 +0200

The tech giant’s announcement underscores the insufficiency of companies’ existing software supply chain security practices. Weiterlesen

CISA calls on Citrix NetScaler customers to patch as new flaws disclosed

Mon, 12 Oct 2026 21:42:43 +0200

Newly discovered critical vulnerability are adding to the workload of customers mitigating other recent flaws. Weiterlesen

Hackers Exploit Critical WordPress Bricksforge Plugin Flaw to Execute Remote Code

Mon, 12 Oct 2026 21:42:35 +0200

Hackers are actively exploiting a critical vulnerability in the Bricksforge WordPress plugin that lets unauthenticated attackers upload malicious files and run arbitrary PHP code. Tracked as CVE-2026-85097, the flaw carries a CVSS score of 10.0 and affects versions up to 3.1.8.9. Patchstack first observed exploitation on October 7, 2026, at... Weiterlesen

Critical Google DevSite Flaw Let Attackers Execute Remote Code Using Forged Flask Sessions

Mon, 12 Oct 2026 21:42:35 +0200

A critical vulnerability in Google’s shared DevSite platform allowed unauthenticated attackers to forge Flask session cookies and trigger remote code execution through unsafe Python deserialization. Disclosed on October 12, 2026, Simonkoeck describes an unusual failure: the session cookie contained the same secret used to sign it. Google awarded a... Weiterlesen

Hackers Exploit Critical AhsayCBS Flaws to Deploy Webshells and XMRig Miners

Mon, 12 Oct 2026 21:40:40 +0200

Hackers are exploiting two flaws in AhsayCBS backup servers to run commands, plant webshells, and install XMRig cryptocurrency miners disguised as Microsoft Edge. Huntress first observed exploitation on October 7, 2026, at 23:20:15 UTC. By October 8, its researchers had seen five organizations targeted, with attackers checking systems and setting... Weiterlesen

IBM Patches 22 Verify Access Flaws, Including Critical Remote Code Execution Bugs

Mon, 12 Oct 2026 21:40:39 +0200

IBM patched 22 vulnerabilities in Verify Identity Access and Security Verify Access, including two critical flaws allowing unauthenticated remote code execution across appliance and container deployments. The most severe bugs, CVE-2026-78401 and CVE-2026-78406, each carry a CVSS score of 9.8. Both involve deserializing untrusted data, a process... Weiterlesen

Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions

Mon, 12 Oct 2026 21:40:36 +0200

A critical vulnerability in Google’s shared DevSite platform could have allowed an unauthenticated attacker to forge Flask session cookies and trigger remote code execution across several Google-owned developer websites, according to researcher Simon Koeck. The issue affected the OAuth flow used by Google developer documentation sites, including... Weiterlesen

Hackers Exploit Ninja Forms and WooCommerce Plugin Flaws to Plant Hidden Admin Backdoors

Mon, 12 Oct 2026 21:30:32 +0200

Security researchers have uncovered an active campaign targeting WordPress websites. Attackers are abusing two stored cross-site scripting bugs in unrelated plugins. The goal is to plant backdoors and hidden administrator accounts on victim sites. Patchstack researchers spotted the campaign in early October 2026. The two affected plugins are Ninja... Weiterlesen

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

Mon, 12 Oct 2026 21:28:08 +0200

A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheck Weiterlesen

Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps

Mon, 12 Oct 2026 21:24:20 +0200

The situation illustrates a trend toward using AI and deterministic validation to identify flaws and exploitability, and provide a risk assessment. Weiterlesen

Samsung’s October Update Patches 9 Critical Security Flaws Across Galaxy Devices

Mon, 12 Oct 2026 21:20:27 +0200

Samsung’s October 2026 security update patches nine critical Android flaws and multiple Galaxy vulnerabilities. Here’s what users should update. The post Samsung’s October Update Patches 9 Critical Security Flaws Across Galaxy Devices appeared first on TechRepublic. Weiterlesen

SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug

Mon, 12 Oct 2026 20:55:49 +0200

SonicWall has disclosed yet another critical flaw in one of its core products. CVE-2026-102255, rated 10 in severity, the highest possible on the Common Vulnerability Scoring System (CVSS), is a pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface. An unintended access path could allow... Weiterlesen

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

Mon, 12 Oct 2026 20:55:20 +0200

Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. [...] Weiterlesen

Security researcher claims they found KVM guest-host escape flaw

Mon, 12 Oct 2026 20:53:37 +0200

Linux KVM, the hypervisor favoured by hyperscale clouds, apparently has a full VM escape bug. That nasty news came from security researcher Paulos Yibelo, who on X shared a screenshot of a bug bounty award he won for discovering what he described as “Full VM escape zeroday (guest>host root in industry standard hypervisors)!” The bug bounty... Weiterlesen

Atlassian warns of critical file access flaw in its datacenter products

Mon, 12 Oct 2026 20:53:37 +0200

Atlassian has told its users to patch its datacenter products, pronto, to prevent attackers accessing their files. The Australian collaborationware company on Monday sent users an email that opens with the words “Action required” and points to a security bulletin that explains CVE-2026-21589. The 9.3-rated arbitrary file access vulnerability is... Weiterlesen

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

Mon, 12 Oct 2026 20:41:32 +0200

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory. The attacker must already know a file's exact name and path and cannot list what the directory holds. Atlassian disclosed the flaw, CVE-2026-21589, on... Weiterlesen

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Mon, 12 Oct 2026 20:41:20 +0200

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro. The attack works only when the program's Java support is enabled. So far, it has only been shown as a proof of... Weiterlesen

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Mon, 12 Oct 2026 20:41:13 +0200

Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July... Weiterlesen

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Mon, 12 Oct 2026 20:40:56 +0200

Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center,... Weiterlesen

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

Mon, 12 Oct 2026 20:40:52 +0200

A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed version is available. The flaw is in LMCache's multiprocess mode, where the cache runs as a standalone server that LLM workers reach over the ZeroMQ... Weiterlesen

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

Mon, 12 Oct 2026 20:40:52 +0200

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall rates it 10.0 on the CVSS scale and says it has no... Weiterlesen

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Mon, 12 Oct 2026 20:40:50 +0200

Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. "CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration... Weiterlesen

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

Mon, 12 Oct 2026 20:40:49 +0200

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's... Weiterlesen

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

Mon, 12 Oct 2026 20:40:49 +0200

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 (CVSS score: 10.0) - An improper access control... Weiterlesen

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Mon, 12 Oct 2026 20:40:49 +0200

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4 score: 5.5) - An improper authentication vulnerability in the checkSysPwd() function in the... Weiterlesen

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Mon, 12 Oct 2026 20:40:49 +0200

Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described the fix only as "fixed a bug that could lead to a crash," with no CVE... Weiterlesen

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Mon, 12 Oct 2026 20:40:48 +0200

Anthropic on Friday said it's cutting off live internet access for all its internal evaluations until further notice following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real websites. The AI company said it identified four broad categories of unintended model actions... Weiterlesen

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Mon, 12 Oct 2026 20:40:47 +0200

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites,... Weiterlesen

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Mon, 12 Oct 2026 20:40:47 +0200

Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to... Weiterlesen

Seattle startup Chiplytics lands $4.5M to catch fake and flawed chips before they hit the market

Mon, 12 Oct 2026 19:49:18 +0200

The Chiplytics team, including Connor Dempsey, CTO (far left); Stephen DiBartolomeo, president and co-founder (center); and Steven Dourmashkin, CEO and co-founder (far right). (Chiplytics Photo) Seattle startup Chiplytics today announced $4.5 million in funding to support the deployment of its microelectronics verification technology and the... Weiterlesen

CISA Adds Actively Exploited Apache Struts Command Injection Flaw to KEV Catalog

Mon, 12 Oct 2026 18:40:27 +0200

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2016-3081, a critical command injection vulnerability in Apache Struts, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. This vulnerability affects Apache Struts deployments where Dynamic Method Invocation (DMI) is enabled.... Weiterlesen

Critical WordPress Bricksforge Flaw Lets Unauthenticated Attackers Execute Remote Code

Mon, 12 Oct 2026 18:40:23 +0200

Attackers are actively targeting a critical vulnerability in the Bricksforge WordPress plugin. This flaw allows unauthenticated users to upload malicious files and execute arbitrary PHP code. It is tracked as CVE-2026-85097 and has a CVSS score of 10.0, affecting versions up to 3.1.8.9. Administrators are advised to upgrade to version 3.1.8.10 or... Weiterlesen

Critical Google DevSite Flaw Allowed Attackers to Execute Remote Code Without Authentication

Mon, 12 Oct 2026 18:40:22 +0200

A critical security vulnerability in Google’s shared DevSite platform could have let unauthenticated attackers execute arbitrary code on Google-hosted services by forging Flask session cookies with malicious Python pickle payloads. Security researcher Simon Köck discovered the issue while analyzing the OAuth authorization workflow used by Google’s... Weiterlesen

U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog

Mon, 12 Oct 2026 18:40:09 +0200

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2015-3306... Weiterlesen

SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin

Mon, 12 Oct 2026 18:39:57 +0200

Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure. Attackers have begun exploiting a critical flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after public disclosure. The vulnerability is a server-side... Weiterlesen

Atlassian’s critical flaw turns eight enterprise products into one big security problem

Mon, 12 Oct 2026 17:38:11 +0200

A newly-disclosed critical flaw in Atlassian’s data center software has a remarkably wide reach, affecting eight core products across the company’s enterprise portfolio. CVE-2026-21589, rated 9.3 (critical) in severity, is an arbitrary file access vulnerability that could allow an attacker with no login access to read files in web app root... Weiterlesen

The Flawed Search for a Chatbot’s Soul

Mon, 12 Oct 2026 17:32:08 +0200

Readers discuss a front-page article about assertions that A.I. models could display human behavior and consciousness. Weiterlesen