Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs
Google has expanded its Cloud Vulnerability Reward Program (VRP) with a new top-tier reward for high-impact architectural security flaws. [...]
Google US
Výsledky hledání
· zachyceno
CrowdStrike Secures AI Agents Inside Claude Cowork
CrowdStrike US
· zachyceno
Introducing AI Kill Switch: Taking Control When AI Agents Go Rogue
US
· zachyceno
CrowdStrike to Acquire Dreadnode to Bring Automated AI Security Testing to the Falcon Platform
CrowdStrike US
· zachyceno
CrowdStrike Advances AI Security and Safety from Endpoint to Cloud
CrowdStrike US
· zachyceno
CrowdStrike to Acquire Fiddler to Deliver Falcon Observe for AI Agent Observability
CrowdStrike US
· zachyceno
SPOJENO PŘES CVE Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-109618, CVE-2026-109619, Summary: This Security Alert addresses CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as PHP2Shell, allow for unauthenticated remote code execution in PHP. Oracle strongly recommends that customers apply the available security patches without delay. The Security Alert advisory will continue to be updated as additional product patches become…
KEV ✓ EPSS 1.00 CVSS 9.8 CVE-2026-109618 CVE-2026-109619 Oracle Festo Apache PHP WAGO Belden QNAP Synology ESET Welotec Juniper Networks HPE METTLER TOLEDO Citrix Cloud Software Group Palo Alto Networks Tenable Splunk Cisco WordPress Drupal Joomla výroba a průmysl školství FI DE FR IT BE US SK CZ CA RU NL AT SE HR GB
OneNote File Extraction, (Sun, Nov 1st)
Recently, I had to extract embedded files from a set of OneNote files (extension .one). My onedump.py tool can extract individual files, so I would have to run this many times. To avoid this, I added a new feature to my onedump.py tool: producing JSON data. Several of my tools already have such a feature: they produce JSON data with the content of their analysis results. onedump's option --jsonoutput produces JSON output with the content of each embedded file found inside the OneNote file. And…
US
Reddit to lock content behind logins to fight scrapers
Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...]
Reddit US
Wireshark 5.0.0rc1 Release, (Sat, Oct 31st)
Wireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark. Didier Stevens Senior handler blog.DidierStevens.com (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Wireshark US
YARA-X 1.22.1 Release, (Sat, Oct 31st)
YARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes. Notice that there was also a release of YARA: 4.6.0, and that this release does not include the YARA-X improvement that adds built-in functions to read 64-bit integers: int64, int64be, uint64, and uint64be. This shows that YARA-X has replaced YARA. Didier Stevens Senior handler blog.DidierStevens.com (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
US
· zachyceno
Vulnerabilities in RT
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-108270, CVE-2026-108279, CVE-2026-108278, CVE-2026-108275, CVE-2026-108353, CVE-2026-108341, CVE-2026-108363, CVE-2026-108364, CVE-2026-108271, CVE-2026-108272, CVE-2026-108273, CVE-2026-108276, CVE-2026-108277, CVE-2026-108280, CVE-2026-108345, CVE-2026-108347, CVE-2026-108365, CVE-2026-108371, CVE-2026-108343, CVE-2026-108344 (+12 other associated CVEs), Summary: RT 5.0.11 is now…
· zachyceno
SPOJENO PŘES CVE Google Chrome Stable Channel Update for Desktop
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-76024, CVE-2026-76025, CVE-2026-76026, CVE-2026-76027, CVE-2026-76028, CVE-2026-76029, CVE-2026-76030, CVE-2026-76031, CVE-2026-119260, CVE-2026-119261, CVE-2026-119262, CVE-2026-119263, CVE-2026-119264, CVE-2026-119265, CVE-2026-119266, CVE-2026-119267, CVE-2026-119268, CVE-2026-119269, CVE-2026-119270, CVE-2026-119271, CVE-2026-119272, Summary: The Stable and Extended Stable channel…
EPSS 0.00 CVSS 9.6 a dalších 4 CVE-2026-119264 CVE-2026-119265 CVE-2026-119266 CVE-2026-119267 CVE-2026-119268 CVE-2026-119269 CVE-2026-119270 CVE-2026-119271 CVE-2026-119272 CVE-2026-76024 CVE-2026-76025 CVE-2026-76026 CVE-2026-76027 CVE-2026-76028 CVE-2026-76029 CVE-2026-76030 CVE-2026-76031 Google FI FR
· zachyceno
CrowdStrike Agent Graph Shows How Agents Act on the Endpoint
CrowdStrike US
· zachyceno
CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
· zachyceno
SPOJENO PŘES CVE Vulnérabilité dans Stormshield Management Center (30 octobre 2026)
Une vulnérabilité a été découverte dans Stormshield Management Center. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
KEV ✓ EPSS 0.83 CVSS 9.8 CVE-2026-111497 Stormshield Broadcom VMware Google Node.js Microsoft Brotli PHP Palo Alto Networks Bun brotlicffi FR FI CA SE US GB IT CZ BE
SPOJENO PŘES CVE Have an older iPhone or iPad? Apple has a security update for you
Apple’s latest updates include a fix for a CoreGraphics bug that may have been exploited in targeted attacks. The fix is now available for older iPhones and iPads. Apple released security updates on October 26. Apple first fixed the flaw in iOS 26.7.1. Its latest updates also bring the fix to older devices that can’t run iOS 26, including the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad. The iOS 18.7.11 update is a backport: it brings a fix from a newer software version to…
KEV ✓ EPSS 0.26 CVE-2026-86950 Apple US FR CA IT
· zachyceno
WordPress 7.1.4
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. As a courtesy, the security fixes were backported to all branches eligible to receive security fixes (currently through 4.7). As a reminder, only the most recent version of WordPress is actively supported. The backports are in…
WordPress FI
· zachyceno
Google Chrome: Stable Channel Update for Desktop
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-118306, CVE-2026-118331, CVE-2026-118348, CVE-2026-118344, CVE-2026-118357, CVE-2026-118318, CVE-2026-118350, CVE-2026-118339, CVE-2026-118305, CVE-2026-118317, CVE-2026-118320, CVE-2026-118322, CVE-2026-118329, CVE-2026-118354, CVE-2026-118340, CVE-2026-118321, CVE-2026-118337, CVE-2026-118352, CVE-2026-118355, CVE-2026-118307 (+32 other associated CVEs), Summary: The Stable channel…
CVSS 9.6 Google FI
· zachyceno
Vulnerabilities Resolved in Veeam Backup & Replication 13.1.2
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.1, CVEs: CVE-2026-108142, CVE-2026-108140, CVE-2026-108141, CVE-2026-105477, Summary: CVE-2026-108142 A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. Severity: Critical CVSS v4.0 Score: 9.1 Affected Deployment Type: Windows-based Veeam Backup & Replication | Veeam Software Appliance Affected Product Veeam Backup & Replication 13.1.1.18 and all…
EPSS 0.00 CVSS 9.1 CVE-2026-105477 CVE-2026-108140 CVE-2026-108141 CVE-2026-108142 Veeam FI
· zachyceno
Mozilla Foundation Security Advisories
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: MFSA 2026-122: Security Vulnerabilities fixed in Thunderbird 153.6 MFSA 2026-121: Security Vulnerabilities fixed in Thunderbird 159 MFSA 2026-120: Security Vulnerabilities fixed in Firefox ESR 153.6 MFSA 2026-119: Security Vulnerabilities fixed in Firefox ESR 115.44 MFSA 2026-118: Security Vulnerabilities fixed in Firefox 159 See also: https://www.mozilla.org/en-US/security/advisories…
Mozilla FI
· zachyceno
GitLab Patch Release: 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14
On October 29, 2026, we released versions 19.5.3, 19.4.5, 19.3.7, 19.2.10, 19.1.10, 19.0.11, 18.11.14 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition 19.5.3 [Backport 19.5] Distrust compromised eMudhra CA certificates Bump Go to 1.27.3 [19.5] Backport Ruby ISEQ and imemo_env Copy-on-Write GC fixes for 3.3 Backport of ‘Stop jobs…
GitLab US
Discord to let search engines index public server messages
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. [...]
Discord US
Chrome and Firefox updates fix serious security flaws. Install them now
On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. The update includes 52 security fixes, including four rated Critical. On the same day, Mozilla issued Security Advisory 2026-118, which fixes 167 vulnerabilities. Firefox 159 also introduces several new features. Both updates will roll out over the coming days and weeks. How…
Risolte vulnerabilità in Google Chrome
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 52 nuove vulnerabilità di sicurezza, di cui 4 con gravità “critica” e 46 con gravità “alta”.
Google IT
Aikido launches external network pentesting
Aikido launches external network pentesting: AI agents attack your internet-facing systems from the outside and report only findings they actually exploit. Category: Company Updates
Aikido BE
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint US
· zachyceno
Apple security updates
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: , Summary: The following updates are published: - iOS 27.2 and iPadOS 27.2 - iOS 26.7.2 and iPadOS 26.7.2 - iOS 18.7.11 and iPadOS 18.7.11 - macOS Golden Gate 27.2 - macOS Tahoe 26.7.2 - macOS Sequoia 15.8.2 - tvOS 27.2 - watchOS 27.2 - visionOS 27.2 - Safari 27.2 - tvOS 26.6.1 (no published CVE entries)
CVSS 8.8 Apple FI
OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. [...]
OpenAI US
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates. [...]
· zachyceno
SPOJENO PŘES CVE Fortinet: Multiple Node.js CVEs being investigated
Classification: Critical, Solution: Unavailable, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-111497, CVE-2026-105481, CVE-2026-106072, CVE-2026-106074, CVE-2026-106070, CVE-2026-106071, CVE-2026-106073, Summary: Fortinet is currently investigating the impact of these CVEs over Fortinet Products. Products under investigation: FortiOS Products confirmed NOT impacted: FortiManager FortiAnalyzer FortiClient EMS FortiAuthenticator…
KEV ✓ EPSS 0.83 CVSS 9.8 CVE-2026-105481 CVE-2026-105482 CVE-2026-105483 CVE-2026-106069 CVE-2026-106070 CVE-2026-106071 CVE-2026-106072 CVE-2026-106073 CVE-2026-106074 CVE-2026-111497 Fortinet Node.js FI US
Kali Linux 2026.3 released with 6 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...]
Kali Linux US
Kali Linux 2026.3 released with 7 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...]
Kali Linux US
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Cross-Site Scripting reflejado en el software IsMyGym de Zuinq Studio
Reflected Cross-Site Scripting in software IsMyGym by Zuinq Studio Mon, 10/26/2026 - 13:03 Aviso Affected Resources Gym Management Software, versions prior to v6.0.85. Description INCIBE has coordinated the publication of a medium severity vulnerability affecting Gym Management Software IsMyGym by Zuinq Studio, software for managing sports centers, gyms, and trainers. The vulnerability was discovered by Gonzalo Aguilar García (6h4ack). This vulnerability has been assigned the following code,…
EPSS 0.00 CVSS 5.1 CVE-2026-4316 Zuinq Studio ES
· zachyceno
Kernel eviction notice: What wesp.sys reveals about the Windows Endpoint Security Platform
Microsoft is building a way for EDR products to run outside the Windows kernel. It is called the Windows Endpoint Security Platform, and two of its binaries already ship in Windows Insider build. One is the kernel driver wesp.sys, the other the user-mode API espclient.dll. Microsoft wants one kernel driver it maintains itself, in place of the one every security vendor currently ships, after the July 2024 CrowdStrike update crashed 8.5 million machines. WESP is undocumented, but the binaries…
Microsoft US
YARA-X 1.22.0 Release, (Sun, Oct 25th)
YARA-X's 1.22.0 release brings 11 improvements and 9 bugfixes. One improvement adds built-in functions to read 64-bit integers: int64, int64be, uint64, and uint64be. Didier Stevens Senior handler blog.DidierStevens.com (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
YARA-X US
· zachyceno
Fortinet Releases Security Hardening Release for Multiple Products
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: Fortinet has released a coordinated set of security updates for FortiOS, FortiManager, and FortiAnalyzer following recent releases from FortiMail and FortiAuthenticator. They strongly urge every customer to plan and promptly complete these upgrades as soon as the releases are available, prioritizing internet-facing devices. These releases include fixes to address vulnerabilities…
Fortinet FI
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. [...]
Microsoft US
ALERTĂ: Vulnerabilități critice în GitLab
DESCRIERE În data de 21.10.2026, GitLab a publicat actualizările de securitate 19.5.1, 19.4....
GitLab RO
· zachyceno
Node.js October 21, 2026 Security Releases
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-105483, CVE-2026-106069, CVE-2026-111497, CVE-2026-105481, CVE-2026-106072, CVE-2026-106074, CVE-2026-106070, CVE-2026-106071, CVE-2026-106073, Summary: This security release includes the following dependency updates to address public vulnerabilities: c-ares on 26.x, 24.x, 22.x ca-cert (eMudhra Intermediate CA Compromise) on 26.x, 24.x, 22.x OpenSSL on 24.x, 22.x SQLite on 22.x Undici…
KEV ✓ EPSS 0.83 CVE-2026-105481 CVE-2026-105483 CVE-2026-106069 CVE-2026-106070 CVE-2026-106071 CVE-2026-106072 CVE-2026-106073 CVE-2026-106074 CVE-2026-111497 Node.js FI
Roundcube security advisory (AV26-1075)
Serial Number: AV26-1075 Date: October 22, 2026 As of October 19, 2026, Roundcube is affected by vulnerabilities in the following product: Roundcube Webmail Prior to 1.6.20 Prior to 1.7.5 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security updates 1.6.20 and 1.7.5 released Roundcube Open Source Webmail Software
Roundcube CA
GitLab security advisory (AV26-1074)
Serial Number: AV26-1074 Date: October 22, 2026 As of October 21, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Community Edition (CE) and Enterprise Edition (EE) Prior to 18.11.13 Prior to 19.0.10 Prior to 19.1.9 Prior to 19.2.9 Prior to 19.3.6 Prior to 19.4.3 Prior to 19.5.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.5.1, 19.4.3,…
GitLab CA
· zachyceno
SPOJENO PŘES CVE GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-110264, CVE-2026-15723, CVE-2026-112212, CVE-2026-12664, CVE-2026-16255, CVE-2026-105777, CVE-2026-13319, CVE-2026-112378, CVE-2026-105711, CVE-2026-14288, CVE-2026-112326, CVE-2026-103515, Summary: On October 21, 2026, we released versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain…
EPSS 0.01 CVSS 10.0 CVE-2026-103515 CVE-2026-105711 CVE-2026-105777 CVE-2026-110264 CVE-2026-112212 CVE-2026-112326 CVE-2026-112378 CVE-2026-12664 CVE-2026-13319 CVE-2026-14288 CVE-2026-15723 CVE-2026-16255 GitLab FI FR US
· zachyceno
Several vulnerabilities were found in Unbound
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-97206, CVE-2026-50106, CVE-2026-96405, CVE-2026-109125, CVE-2026-35501, Summary: Several vulnerabilities were found in Unbound. We are releasing 1.26.2 as a security release today (October 21) including the relevant fixes. The overview of the vulnerabilities with a brief description is: CVE-2026-97206 - severity: HIGH DoQ path-migration can lead to use-after-free on multi-threaded…
EPSS 0.00 CVE-2026-109125 CVE-2026-35501 CVE-2026-50106 CVE-2026-96405 CVE-2026-97206 Unbound FI
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks. [...]
Google US
Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20043 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787. As part of…
EPSS 0.00 CVE-2026-20043 CVE-2026-20236 CVE-2026-20291 CVE-2026-20356 Cisco US
· zachyceno
Google Chrome Releases Stable Channel Update for Desktop
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-113341, CVE-2026-113279, CVE-2026-113072, CVE-2026-113280, CVE-2026-113271, CVE-2026-113303, CVE-2026-113101, CVE-2026-113097, CVE-2026-113098, CVE-2026-113242, CVE-2026-113058, CVE-2026-113082, CVE-2026-113119, CVE-2026-113092, CVE-2026-113134, CVE-2026-113339, CVE-2026-113317, CVE-2026-113193, CVE-2026-113117, CVE-2026-113188 (+333 other associated CVEs), Summary: The Chrome team is…
Google FI
· zachyceno
Roundcube Webmail Security updates 1.6.20 and 1.7.5 released
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: We just published security updates to the 1.6 LTS and 1.7 versions of Roundcube Webmail. They both contain fixes for recently reported security vulnerabilities.
Roundcube FI
· zachyceno
SVD-2026-1007: Security Vulnerabilities in Splunk Enterprise - October 2026
Splunk addressed multiple vulnerabilities in Splunk Enterprise versions 10.4.4, 10.2.8, 10.0.11, and 9.4.16. See CVE Details for vulnerability-specific affected versions, additional remediation, acknowledgments, and workarounds.
EPSS 0.00 CVE-2026-76287 CVE-2026-76288 CVE-2026-76289 CVE-2026-76290 CVE-2026-76291 CVE-2026-76292 CVE-2026-76293 CVE-2026-76294 CVE-2026-76295 CVE-2026-76296 CVE-2026-76297 CVE-2026-76298 Splunk US
· zachyceno
SVD-2026-1009: Third-Party Package Updates in Splunk Enterprise - October 2026
Splunk remedied common vulnerabilities and exposures (CVEs) in third-party packages in Splunk Enterprise versions 10.4.4, 10.2.8, 10.0.11, and 9.4.16 or higher.
EPSS 0.02 CVE-2026-25541 CVE-2026-33186 CVE-2026-59877 Splunk US
· zachyceno
SVD-2026-1010: Security Vulnerabilities in Splunk SOAR - October 2026
Splunk addressed multiple vulnerabilities in Splunk SOAR version 8.7.0. See CVE Details for vulnerability-specific affected versions, additional remediation, acknowledgments, and workarounds.
EPSS 0.00 CVE-2026-76303 CVE-2026-76304 CVE-2026-76305 CVE-2026-76306 CVE-2026-76307 CVE-2026-76308 CVE-2026-76406 Splunk US
Identity Posture Assessment for Microsoft 365 | Managed ISPM
Build identity resilience with Identity Posture Assessment, an on-demand Microsoft 365 report that scores your identity defenses and shows how fast you can fix the gaps.
Microsoft US
Introducing ITDR Lookback: Find Out Who Was in Your Microsoft 365 Tenant Before You Were
Attackers may be in your tenant before you connect it. Huntress Managed ITDR Lookback reviews 180 days of Microsoft 365 logins & our SOC acts on active incidents.
Microsoft US
Aikido launches Noon: workforce security for every employee
Aikido launches Noon, a workforce security business. AI governance, device and email protection, and training against AI-powered phishing and deepfakes. Category: Company Updates
BE
Agents are your newest insiders. Security must move at their speed.
Agents are rapidly becoming part of how work gets done. They can support a range of activities from writing code and researching products to analyzing revenue, processing expenses, and acting across the systems that run the business. To be most useful, they often need access to company data, applications, tools, and other agents. That access is what makes agents more capable. With that capability can come insider risk. This does not mean agents are inherently malicious. It means they are…
Microsoft US
Drata and Aikido: audit-ready pentesting, built into your compliance workflow
Drata and Aikido bring AI pentesting into your compliance workflow. Get verified findings, auditor-ready reports, and up to $4,000 in free pentest credits. Category: Compliance
BE
· zachyceno
Apache Camel: 38 CVEs fixed in 4.18.5, 4.22.1 and 4.23.0
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-43865, CVE-2026-78162, CVE-2026-78163, CVE-2026-78164, CVE-2026-78165, CVE-2026-79983, CVE-2026-79984, CVE-2026-79985, CVE-2026-79986, CVE-2026-80312, CVE-2026-80343, CVE-2026-80344, CVE-2026-83531, CVE-2026-84176, CVE-2026-84178, CVE-2026-84180, CVE-2026-84181, CVE-2026-85243, CVE-2026-85245, CVE-2026-85246 (+20 other associated CVEs), Summary: On 15 October the Apache Camel PMC…
Apache FI
· zachyceno
Google Chrome Releases Extended Stable Update for Desktop
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-110151, CVE-2026-110922, CVE-2026-110144, CVE-2026-110159, CVE-2026-110166, CVE-2026-110172, CVE-2026-110913, CVE-2026-110918, CVE-2026-110919, CVE-2026-110921, Summary: The Extended Stable channel has been updated to 152.0.7977.169 for Windows and Mac which will roll out over the coming days/weeks. There are 10 security fixes.
EPSS 0.00 CVE-2026-110144 CVE-2026-110151 CVE-2026-110159 CVE-2026-110166 CVE-2026-110172 CVE-2026-110913 CVE-2026-110918 CVE-2026-110919 CVE-2026-110921 CVE-2026-110922 Google FI
· zachyceno
Google Chrome Releases Stable Channel Update for Desktop
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-110922, CVE-2026-110913, CVE-2026-110919, CVE-2026-110918, CVE-2026-110917, CVE-2026-110921, CVE-2026-110920, CVE-2026-110916, CVE-2026-110915, CVE-2026-110914, Summary: The Stable channel has been updated to 155.0.8059.84/.85 for Windows and Mac and 155.0.8059.84 to Linux which will roll out over the coming days/weeks. This update includes 10 security fixes.
EPSS 0.00 CVE-2026-110913 CVE-2026-110914 CVE-2026-110915 CVE-2026-110916 CVE-2026-110917 CVE-2026-110918 CVE-2026-110919 CVE-2026-110920 CVE-2026-110921 CVE-2026-110922 Google FI