Breaking news
Fast advisories on major security incidents and emergency patches, built from the vendor's own notice plus independent reporting, and updated as facts are confirmed.
18 entries
Microsoft Paint RCE fix reaches Store, not Windows Update
Microsoft says Paint CVE-2026-83844 is fixed in build 11.2609.401.0, delivered through Microsoft Store updates rather than Windows Update.
OpenSSH 10.6p2 Fixes a Password Authentication Bypass on musl Builds Without PAM (CVE-2026-123158)
OpenSSH before 10.6p2 on musl libc without PAM can accept a long password for a locked "*" account. Who is affected, the conditions, and how to fix or detect it.
Zyxel patches exploited flaw in GS1900 network switches
Zyxel patched CVE-2026-107441 in ten GS1900 switch models after attackers compromised 996 devices across 48 countries.
Malicious cPGuard Updates Distributed in OPSSHIELD Supply Chain Attack
OPSSHIELD says malicious cPGuard updates affected versions 5.88.12 through 5.88.19 and exposed sensitive server data.
Android’s November 2026 Updates Address Over 200 Vulnerabilities
Android’s November 2026 updates address over 200 vulnerabilities, including a critical Framework flaw that enables remote code execution.
Attackers Exploit Siemens SIMATIC IoT2050 Node-RED Flaw
Siemens says four SIMATIC IoT2050 product lines are affected by CVE-2026-58115, which attackers are exploiting to deploy flows and backdoors.
CVE-2026-41709 Exploited to Reduce VMware ESX Audit Visibility
CVE-2026-41709 is actively exploited in VMware ESX. CISA lists an 2026-11-11 remediation deadline for federal agencies.
Oracle E-Business Suite RCE Probed After October Patch
Threat actors are probing CVE-2026-101767 in Oracle E-Business Suite after Oracle released patches on October 20, 2026.
Anthropic IPO Filing Details Potential AI Safety and Security Risks
Anthropic’s SEC filing outlines potential harms from advanced AI, including misuse by bad actors and systems going rogue.
Dormant AI agents may retain access to company systems
A report says inactive AI agents can retain credentials, sensitive connections and external triggers, while coding agents face malicious Downloads.
Brotli Decoder Flaw CVE-2026-111497: Patch Node.js and Python, and What an Edge Rule Can and Cannot Do
A CVSS 9.2 out-of-bounds write in Google's Brotli decoder affects Node.js, Python packages and anything that decodes Brotli. Fixed versions, how it is reached, and what WAF rules cover.
CISA Adds Exploited Collabora Online and VeloCloud Flaws
CISA lists exploited Collabora Online and VeloCloud flaws, with fixes available and an October 26, 2026, federal remediation date.
LiteLLM 1.107.0 Was Backdoored: Who Is Affected and What to Rotate
A hijacked release pipeline shipped a credential-stealing LiteLLM 1.107.0 to PyPI and Docker for about two hours on October 21. How to tell if you ran it and what to rotate.
ConnectWise Updates Cloud Backup Restoration After ARTEX Attack
ConnectWise says Cloud Backup restoration testing continues, with backup access targeted for October 26 after an ARTEX-linked attack.
GitLab patches critical unauthenticated code execution flaw
GitLab patched a critical regular expression compiler flaw that could let unauthenticated users execute code on vulnerable CE and EE servers.
Stolen UpdraftCentral Keys Used to Backdoor WordPress Sites: What to Do
TeamUpdraft says UpdraftCentral connection keys were exposed; researchers report backdoor plugins on connected WordPress sites. What to check and update.
eMudhra Intermediate CA Key Compromise: What Breaks and What to Update
Private keys for eight eMudhra intermediate CAs were compromised. Browsers are protected; servers, SDKs, containers and custom trust stores need updates.
PHP2Shell (CVE-2026-109618, CVE-2026-109619) Exploited in the Wild: Upgrade PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is being exploited. Upgrade to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, then check for compromise back to October 17.