Latest Intelligence — Page 3 of 24
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtu...
Microsoft dicht ruim 1400 beveiligingslekken tijdens record Patch Tuesday
Tijdens de Patch Tuesday van oktober heeft Microsoft ruim 1400 beveiligingslekken in de eigen software gepatcht, waaronder een actief aangevallen kwetsbaarheid....
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. Th...
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under ...
Microsoft Patch Tuesday – October 2026
1,411 Vulnerabilities and Three Zero-DaysStudy SecurityAn actively exploited Windows Shell flaw, publicly disclosed vulnerabilities and a record-breaking secur...
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
Microsoft addressed 1,413 vulnerabilities in its October 2026 security update release, including one exploited zero-day vulnerability, two publicly disclosed ze...
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
Source: China Photos via Getty ImagesAs we progress further into the AI-driven "vulnpocalypse era," Microsoft’s October 2026 Patch Tuesday security update blows...
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed ...
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on O...