NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 5h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 6h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 6h Vulnerability in Sparx Systems Enterprise Architect software · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 7h Vulnerabilities in Slican telephone exchanges · 8h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 11h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 11h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 11h EU Grocers Pay a Steep Price for Unpatched Fridge Firmware · 11h NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks · 5h Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing · 6h Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules · 6h Vulnerability in Sparx Systems Enterprise Architect software · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 7h Vulnerabilities in Slican telephone exchanges · 8h Palo Alto Networks waarschuwt voor misbruik van beveiligingslek in firewalls · 11h Cisco meldt actief misbruik van kritiek lek in Secure Email Gateway · 11h Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · 11h EU Grocers Pay a Steep Price for Unpatched Fridge Firmware · 11h
🛡️
ACyber Sentinel Security Assessment Team
🇬🇧 English 🇮🇷 فارسی 🇸🇦 العربية 🇷🇺 Русский 🇨🇳 中文 🏛️ Latina
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities ⚡ Breaking

October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities

Microsoft addressed 1,413 vulnerabilities in its October 2026 security update release, including one exploited zero-day vulnerability, two publicly disclosed zero-day vulnerabilities, and 75 Critical vulnerabilities. Thi...

📰 CrowdStrike.com 🕐 1d ⏱ 29 min read
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

Dark Reading · 2d
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

The Hacker News · 3d
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

The Hacker News · 3d

Latest Intelligence — Page 1 of 2

SonicWall SMA1000-kwetsbaarheid actief misbruik bij aanvallen

SonicWall SMA1000-kwetsbaarheid actief misbruik bij aanvallen

vrijdag 9 oktober 2026, 15:00 door Redactie, 0 reactiesLaatst bijgewerkt: Vandaag, 15:05 Een kritieke kwetsbaarheid in de SonicWall SMA1000-gateway, met een max...

📰 security.nl 🕐 6d
SonicWall SMA1000-kwetsbaarheid actief misbruikt bij aanvallen

SonicWall SMA1000-kwetsbaarheid actief misbruikt bij aanvallen

vrijdag 9 oktober 2026, 15:00 door Redactie, 0 reactiesLaatst bijgewerkt: 09-10-2026, 15:05 Een kritieke kwetsbaarheid in de SonicWall SMA1000-gateway, met een ...

📰 security.nl 🕐 6d
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordi...

📰 The Hacker News 🕐 Oct 08
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache. "Instead of downl...

📰 The Hacker News 🕐 Oct 06
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privil...

📰 The Hacker News 🕐 Oct 05
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep fin...

📰 The Hacker News 🕐 Oct 05
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in atta...

📰 The Hacker News 🕐 Oct 03
Cyber Brief 26-10 - September 2026

Cyber Brief 26-10 - September 2026

Cyber Brief (September 2026)October 2, 2026 - Version 1TLP:CLEARExecutive summaryWe analysed 358 open source reports for this Cyber Brief1.Relating to cyber pol...

📰 europa.eu 🕐 Oct 02
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the...

📰 The Hacker News 🕐 Sep 28