Tag: vulnerability management
685 articles
Drupal Patches Code Flaws, Warns of Imminent Exploits
The Drupal Security Team is warning site owners to update their core software ASAP, as two critical vulnerabilities have been discovered that could lead to remote code execution - and exploits could be developed within hours or days. Get ready to patch up: CVE-2026-108097 and CVE-2026-108099 need urgent attention to prevent attacks.
Google Warns of China Espionage Actor Exploiting BeyondTrust Flaw
Google warns that a suspected China state-sponsored espionage actor, known as Armory Castle, has been actively exploiting a critical BeyondTrust Remote Support vulnerability, rated 9.3 on the CVSS scale, since August 2026. This group has a history of long-term intelligence collection for the People’s Republic of China, targeting industries from legal services to government agencies.
BeyondTrust Zero-Day Exploited in Targeted Attacks Since August
A critical zero-day vulnerability, CVE-2026-102764, has been exploited in targeted attacks since late August, putting BeyondTrust Remote Support users at risk of file operations and even full root control by unprivileged remote attackers. The flaw affects Remote Support builds 26.2.3 and earlier, but thankfully, patches are available.
NGINX Disrupts Multiple Flaws, Including Possible RCE and TLS Session Forgery
NGINX just dropped a critical update to squash five vulnerabilities, including a long-standing flaw dating back to May 2005 that could lead to code execution or crashes in certain configurations. The patches fix memory bugs, a TLS session-ticket weakness, and an HTTP/3 parser issue that could put your system at risk.
Vulnerabilities in LiteLLM Gateway Expose AI Systems to Takeover
With two high-risk vulnerabilities discovered in LiteLLM, a popular open-source gateway tool, hackers can easily hijack AI systems, allowing them to wreak havoc and cause serious damage. Anyone with an account on a vulnerable deployment can take over the gateway and exploit it for malicious purposes.
AhsayCBS Flaws Get Fresh Fixes After Exploitation
Don't wait until it's too late - apply the AhsayCBS hotfix immediately to shield your environment and customer data from severe vulnerabilities that can be exploited for unauthenticated remote code execution. Reboot your server after applying the fix to ensure you're fully protected.
Palo Alto Networks Fixes Authenticated RCE Flaw Under Active Exploitation
Palo Alto Networks has patched a critical vulnerability, CVE-2026-0322, that allowed hackers to execute malicious code with root privileges on its firewalls - and it was under active attack. This authenticated remote code execution flaw, scoring 8.6 in severity, could be exploited by anyone with network access to the PAN-OS management interface.
CISA Warns of Actively Exploited Ivanti Connect Secure Vulnerability
Warning: a high-severity vulnerability in Ivanti Connect Secure is under active exploitation, putting your systems at risk of remote attacks - don't wait to patch! Federal agencies must apply fixes by October 16, 2026, to stay secure.
Agentic Pentesting Exposes Coverage Gaps
Imagine having a powerful tool that can scan for vulnerabilities at incredible speed, but sometimes struggles to reach every corner of your system - that's what happened when agentic pentesting uncovered a major nginx-ui authentication bypass, missing 360 instances that were left without a clear verdict. By combining AI-driven dynamism with human insight, agentic pentesting offers a potent solution to bridge the gap between vulnerability discovery and exploitation.
Curl Fixes Flaw That Exposes Clients to Code Execution
A subtle bug in curl's HTTP/2 upload sequence could let malicious servers corrupt memory on machines running the curl client and libcurl library, potentially leading to code execution - but thankfully, a fix was swiftly rolled out in curl 8.23.0 on October 14. The vulnerability, tracked as CVE-2026-92392, affects curl releases 8.12.0 through 8.22.0.
CISA Warns of Active Ivanti Connect Secure Exploit Attempts
Warning signs are flashing: 105 attempted hacks have targeted Ivanti Connect Secure systems in a short span, exploiting a severe authentication-bypass bug that lets attackers run malicious commands remotely. This zero-day vulnerability, tracked as CVE-2026-104935, is under active attack, putting unpatched systems at risk.
Microsoft Discloses Record 1411 CVEs in October Patch Update
Microsoft just dropped a record-breaking 1,411 security updates in its October Patch Tuesday release, outpacing the total number of fixes issued in all of 2025. This massive haul was made possible by the company's new AI-driven scanning tools that supercharge vulnerability detection.
Large Firms Expose Themselves to Cyber Risk by Leaving Vulnerabilities Unpatched
Large companies are leaving themselves exposed to cyber risk by neglecting to patch high or critical vulnerabilities, with 66% of security leaders at firms with over $1bn in revenue admitting to doing so at least sometimes. This stark contrast with smaller firms highlights a troubling trend in cyber risk management.
Microsoft Discloses Over 1,400 Security Flaws in Record Patch Update
Microsoft just dropped a record-breaking patch update, fixing over 1,400 security vulnerabilities in Windows and other software - that's roughly ten times its usual monthly output! This massive update surpasses the previous record, and brings the year's total discovered vulnerabilities to over 4,000.
Microsoft Disrupts 1,413 Vulnerabilities, Fixes Exploited Windows Shell Bug
Microsoft just dropped a record-breaking Patch Tuesday update, tackling a whopping 1,413 vulnerabilities - and yes, that includes a critical Windows Shell bug that's already being exploited. This massive release underscores a new normal in cybersecurity: hundreds of fixes are no longer an exception, but the baseline.
Ghostscript Flaw Exposes Servers to Remote Code Execution via PDFs
A critical flaw in Ghostscript, a popular PostScript and PDF interpreter, can be exploited by hackers to remotely execute code on vulnerable servers - simply by processing a specially crafted PDF file. This severe vulnerability, known as a heap buffer overflow, can be triggered by a malicious PDF containing a JPEG 2000 image with specific characteristics.
Microsoft Bolsters Windows 10 with KB5126657 Security Update
Microsoft just dropped a crucial security update, KB5126657, for Windows 10, packing fixes for a whopping 1,411 vulnerabilities, including an actively exploited zero-day flaw. This update is a must-install for all Windows 10 users, especially those running Enterprise LTSC or enrolled in the program.
Microsoft Patch Tuesday Disrupts 1,411 Flaws, Zero-Day Exploits
Microsoft's October Patch Tuesday update is a doozy, tackling a staggering 1,411 vulnerabilities in one fell swoop! This record-breaking release includes fixes for a massive number of flaws across the company's software portfolio.
Docker Fixes Flaw That Let Users Push Images as Others on Hub
Docker patched a critical security flaw that allowed users to push images as others on Docker Hub, exposing a vulnerability that went undetected for over two years. The bug, logged as CVE-2026-105445, had a near-perfect CVSS 4.0 score of 9.4, highlighting the severity of the issue.
GitHub Bolsters npm Security After Loophole Exposes 1,500 Packages to Hijacking
GitHub has stepped up npm security measures after a loophole was discovered, exposing over 1,500 packages to hijacking - with a whopping 10 million downloads between them. To prevent future breaches, GitHub now requires a 48-hour validation window for trusted publishing.
Ivanti Discloses Zero-Day Exploited in Targeted Attacks
A high-severity zero-day vulnerability in Ivanti Connect Secure appliances is being exploited in targeted attacks, allowing remote attackers to execute arbitrary commands without user interaction. This authentication bypass flaw, tracked as CVE-2026-104935, affects several ICS versions and requires immediate patching and mitigation.
Docker Hub vulnerability exposes user impersonation risk
A critical vulnerability in Docker Hub, known as CVE-2026-105445, allowed attackers to impersonate users by exploiting a loophole in personal access token handling, putting user accounts at risk of being compromised. This flaw enabled malicious actors to convert a personal account into an organization, reassigning the token to another user without their consent.
SAP Discloses Maximum-Severity OAuth2 SSRF Flaw in Cloud SDK
SAP has patched a critical OAuth2 vulnerability in its Cloud SDK for Python, which could allow attackers to steal sensitive credentials by redirecting token requests to a server of their choice. This flaw, tracked as CVE-2026-89111, poses a major threat to multi-tenant BTP applications.
GitLab Fixes Code Execution Flaw with Maximum Severity Rating
GitLab has patched a critical vulnerability that could have let hackers run malicious code on its servers, thanks to a flaw in its CI/CD configuration that wasn't properly validating regular expressions. This maximum-severity bug, tracked as CVE-2026-97229, could be exploited by unauthenticated users, making it a major security risk.