Android gets AI defenses against messaging scams, fake calls
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
Výsledky hledání
Update Chrome: Google fixes 37 security flaws, including seven critical bugs
On October 13 and 14, Google issued several Chrome updates. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 for Linux. The update includes 37 security fixes, including seven rated Critical. On the same day, Google released version 155.0.8059.79 for Android. It may not be available on Google Play for everyone yet but keep an eye out for it. Google says it also includes stability and performance…
EPSS 0.01 CVE-2026-110136 CVE-2026-110147 CVE-2026-110152 Google US
Is this link safe? Find out with Malwarebytes Scam Link Check
Maybe it’s a text saying your package couldn’t be delivered, with a link to reschedule. Or an email from your bank asking you to verify your account. Or perhaps it’s an invitation from someone you know to view a document. The message looks real enough, but something about the link feels fishy. Do you click it? Malwarebytes Scam Link Check is a new free tool that lets you check a suspicious link before you click. Simply paste the link into Scam Link Check, and Malwarebytes will scan it for signs…
Malwarebytes US
TruConfidence: Why Your Patch Automation Can Finally Be Autonomous
TruConfidence: The AI-Powered Remediation Intelligence & Orchestration engine powering TruRisk Eliminate 2.0 delivers autonomous remediation at scale with proof at every step. Executive Summary Vulnerabilities are now discovered faster than enterprises can remediate them. Patch automation has been around for years, but vulnerability backlogs are still growing. Automation isn’t the bottleneck. Confidence is: without evidence of how a change will behave, Security and IT teams hold back, and the…
Qualys US
Aggiornamenti Mensili Microsoft
Microsoft ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono un totale di 1416 nuove vulnerabilità, di cui una di tipo 0-day.
Microsoft IT
Risolte vulnerabilità in Google Chrome
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 37 nuove vulnerabilità di sicurezza, di cui 7 con gravità “critica” e 29 con gravità “alta”.
Google IT
Security Alert: Microsoft Releases October 2026 Security Updates
Microsoft JP
· zachyceno
Google Extended Stable Update for Desktop
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-106347, CVE-2026-106358, CVE-2026-110136, CVE-2026-110148, CVE-2026-110161, CVE-2026-106184, CVE-2026-106200, CVE-2026-106235, CVE-2026-106383, CVE-2026-110139, CVE-2026-110140, CVE-2026-110141, CVE-2026-110147, CVE-2026-110153, CVE-2026-110155, CVE-2026-110156, CVE-2026-110157, CVE-2026-110160, CVE-2026-110162, CVE-2026-110163 (+8 other associated CVEs), Summary: The Extended Stable…
Google FI
· zachyceno
Google Stable Channel Update for Desktop
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-110152, CVE-2026-110149, CVE-2026-110136, CVE-2026-110161, CVE-2026-110165, CVE-2026-110148, CVE-2026-110151, CVE-2026-110162, CVE-2026-110170, CVE-2026-110160, CVE-2026-110143, CVE-2026-110146, CVE-2026-110150, CVE-2026-110156, CVE-2026-110137, CVE-2026-110140, CVE-2026-110158, CVE-2026-110145, CVE-2026-110159, CVE-2026-110144 (+17 other associated CVEs), Summary: The Stable channel…
Google FI
· zachyceno
September 2026 ArcGIS Security Bulletin
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-69227, CVE-2026-69226, CVE-2026-10759, Summary: The Portal for ArcGIS 2026 Security Update 4 patch has been released and is available here. CVE-2026-69227 :Missing Authentication for Critical Function CVE-2026-69226:3 Incorrect Authorization CVE-2026-10759: Improper Neutralization of Special Elements used in an LDAP Query (‘LDAP Injection’)
EPSS 0.00 CVSS 9.8 CVE-2026-10759 CVE-2026-69226 CVE-2026-69227 FI
· zachyceno
ADV260001 ADV260001 Hardening changes for ReFS volumes on removable media
Starting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the [Resilient File System (ReFS)](https://learn.microsoft.com/windows-server/storage/refs/refs-overview). This change is not enable by default until 2027. Please see [Hardening changes for ReFS volumes on removable media](https://support.microsoft.com/en-us/servicing/os/windows/docs/2026/10/hardening-changes-for-refs-volumes-on-removable-media) for more information.
Microsoft US
· zachyceno
GitLab Critical Patch Released
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-97229, CVE-2026-92883, CVE-2026-16301, CVE-2026-14814, CVE-2026-81839, CVE-2026-96893, CVE-2026-101168, CVE-2026-7767, CVE-2026-16275, CVE-2026-84284, CVE-2026-85529, CVE-2026-100755, CVE-2026-14552, CVE-2026-6567, CVE-2026-104661, CVE-2026-14210, CVE-2026-105458, CVE-2026-5954, CVE-2026-92528, CVE-2026-78335 (+4 other associated CVEs), Summary: On October 12, 2026, we released…
CVSS 10.0 GitLab FI
Exploitability Needs Runtime Evidence: Understanding Runtime Vulnerability Reachability for Containers
Key Takeaways Qualys Runtime Vulnerability Reachability for Containers brings runtime evidence directly into vulnerability prioritization. Package presence in a container image does not mean the vulnerable software is actually part of the workload’s live execution. Runtime reachability answers whether the vulnerable software is relevant to a running workload, a different question from whether the vulnerability is theoretically exploitable. Qualys retains runtime evidence over an observation…
Qualys US
2026-016: Critical Vulnerability in GitLab CE and EE
On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server. CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.
GitLab EU
· zachyceno
SPOJENO PŘES CVE Multiples vulnérabilités dans GitLab (12 octobre 2026)
De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
KEV ✓ EPSS 0.27 CVSS 10.0 a dalších 7 CVE-2026-14552 CVE-2026-14814 CVE-2026-16275 CVE-2026-16301 CVE-2026-5954 CVE-2026-6567 CVE-2026-7767 CVE-2026-78335 CVE-2026-81839 CVE-2026-82632 CVE-2026-84284 CVE-2026-85529 CVE-2026-92528 CVE-2026-9268 CVE-2026-92883 CVE-2026-96893 CVE-2026-97229 GitLab FR US
· zachyceno
SPOJENO PŘES CVE Security Hardening in Splunk Enterprise - September/October 2026
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-76281, CVE-2026-76282, CVE-2026-76283, CVE-2026-76284, CVE-2026-76285, Summary: Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group.
EPSS 0.00 CVSS 9.8 CVE-2026-76281 CVE-2026-76282 CVE-2026-76283 CVE-2026-76284 CVE-2026-76285 Splunk FI US
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
Traditional attack surface management helps organizations discover exposed assets, but visibility alone is not enough to address threats. Criminal IP introduces AITEM, an AI-powered approach that connects exposure discovery with investigation, risk prioritization, and response. [...]
Criminal IP US
Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
US
Microsoft: Outdated Windows devices will stop receiving security updates
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation. [...]
Microsoft US
Microsoft Teams to get support for third-party deepfake detection tools
Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings. [...]
Microsoft US
· zachyceno
Introducing AlertZero: Inbox zero for your alert queue
For the last several months, we’ve been busy talking to security teams and building answers to the AI-accelerated challenges that you’ve told us you’re facing. Among these are the overwhelming volume and velocity of alerts, exacerbated by attackers equipped with AI. The Hugging Face incident demonstrated another core challenge in the security operations center (SOC). Even if all of the signals are detected, that’s not enough, unless something connects them as part of a single attack. Combined,…
Elastic US
wolfSSL security advisory (AV26-1016)
Serial number: AV26-1016 Date: October 7, 2026 As of October 7, 2026, wolfSSL is affected by vulnerabilities in the following product: wolfSSH Prior to 1.6.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. wolfSSH Release 1.6.0 (October 6, 2026) WolfSSH Release list
wolfSSL CA
Cisco NX-OS Software Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by…
EPSS 0.04 CVE-2026-76453 CVE-2026-76455 CVE-2026-76456 CVE-2026-76457 CVE-2026-76458 CVE-2026-76459 Cisco US
Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and streamline the disclosure process…
EPSS 0.00 CVE-2026-76498 CVE-2026-76499 CVE-2026-76500 Cisco US
Microsoft Outlook to block MSIX attachments starting November
Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month. [...]
Microsoft US
Update Chrome and ChromeOS to fix critical security issues
Google has released updates for the Chrome browser and the ChromeOS operating system. On October 6, Google released a Stable Channel Update for Desktop. This is the most important one for desktop users. It brings Chrome to version 155.0.8059.39 for Linux and versions 154.0.8037.39/.40 for Windows and Mac. The update includes 247 security fixes including four rated Critical. On the same day, Google released version 155.0.8059.39 for Android, to a small percentage of users. It may not be…
EPSS 0.01 CVE-2026-106197 CVE-2026-106240 CVE-2026-106358 Google US
Risolte vulnerabilità in Google Chrome
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 247 nuove vulnerabilità di sicurezza, di cui 12 con gravità “critica” e 42 con gravità “alta”.
Google IT
· zachyceno
WordPress 7.1.3 Maintenance and Security Release
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.3 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic background updates, the update…
WordPress FI
· zachyceno
Google Chrome Stable Channel Update
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-106382, CVE-2026-106197, CVE-2026-106358, CVE-2026-106347, CVE-2026-102322, CVE-2026-106245, CVE-2026-106327, CVE-2026-106366, CVE-2026-106258, CVE-2026-106376, CVE-2026-106308, CVE-2026-106215, CVE-2026-106369, CVE-2026-106293, CVE-2026-106377, CVE-2026-106412, CVE-2026-106243, CVE-2026-106214, CVE-2026-106364, CVE-2026-106239 (+227 other associated CVEs), Summary: The Stable channel…
Google FI
From Detonation to Detection: The Sandbox Now Writes the Rules
Understanding what a malware sample does and being able to detect it are two different jobs, and the second one needs a skill many teams are short of. The Group-IB Malware Detonation Platform now produces indicators, Sigma rules, and hunting queries from the behavior it observes.
Group-IB SG
tenfold CE: Our free Identity Governance tool just got 2 new features
tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new features help teams manage Microsoft 365 sharing and investigate suspicious identity activity. [...]
SPOJENO PŘES CVE Risolta vulnerabilità su GitLab AI Gateway
Rilasciati aggiornamenti di sicurezza per risolvere una vulnerabilità con gravità “critica” che interessa GitLab AI Gateway. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente autenticato malevolo di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.17 CVSS 9.9 CVE-2026-90970 GitLab IT FR FI US
· zachyceno
Falcon Data Security for SaaS Secures Sensitive Data in Microsoft 365
Microsoft US
· zachyceno
New in Falcon Cloud Security: Third-Party App Insights and AI-Enhanced Remediation
US
YARA-X 1.21.0 Release, (Sat, Oct 3rd)
YARA-X's 1.21.0 release brings 5 improvements and 4 bugfixes. One improvement is allowing stdin for CLI option --scan-list. This allows one to generate a list of folders to scan, and pass it via a pipe. Like this example (Windows) to scan all folders with "sample" in their name: dir /s /b /a:d c:\*samples* | yr.exe scan --scan-list - rules.yara Didier Stevens Senior handler blog.DidierStevens.com (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0…
YARA-X US
· zachyceno
Google Chrome Stable Channel Update
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.3, CVEs: CVE-2026-103628, CVE-2026-103626, CVE-2026-103621, CVE-2026-103630, CVE-2026-103625, CVE-2026-103624, CVE-2026-103629, CVE-2026-103622, CVE-2026-103623, CVE-2026-103631, CVE-2026-103627, Summary: The Stable channel has been updated to 154.0.8037.97/.98 for Windows and Mac and 154.0.8037.97 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is…
EPSS 0.00 CVSS 6.3 CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 Google FI
Microsoft to block Entra ID script injection attacks starting October
Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month. [...]
Microsoft US
Risolte vulnerabilità in Google Chrome
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 32 nuove vulnerabilità di sicurezza, di cui 6 con gravità “critica” e 11 con gravità “alta”.
EPSS 0.00 CVE-2026-102299 CVE-2026-102301 CVE-2026-102302 CVE-2026-102304 CVE-2026-102306 CVE-2026-102308 CVE-2026-102309 CVE-2026-102312 CVE-2026-102316 CVE-2026-102317 CVE-2026-102321 CVE-2026-102323 CVE-2026-102324 CVE-2026-102326 CVE-2026-102328 CVE-2026-102329 CVE-2026-102331 Google IT
· zachyceno
Joomla 6.1.4 & 5.4.9 Security & Bugfix Release
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-90906, CVE-2026-90907, CVE-2026-90913, CVE-2026-90914, CVE-2026-90915, CVE-2026-90916, CVE-2026-90917, CVE-2026-90918, CVE-2026-92222, CVE-2026-92223, CVE-2026-92225, CVE-2026-92226, CVE-2026-92232, CVE-2026-92227, CVE-2026-92231, Summary: The Joomla! Project is pleased to announce the release of Joomla 6.1.4 and Joomla 5.4.9. These are security & bugfix releases for the Joomla 5.x…
EPSS 0.00 CVE-2026-90906 CVE-2026-90907 CVE-2026-90913 CVE-2026-90914 CVE-2026-90915 CVE-2026-90916 CVE-2026-90917 CVE-2026-90918 CVE-2026-92222 CVE-2026-92223 CVE-2026-92225 CVE-2026-92226 CVE-2026-92227 CVE-2026-92231 CVE-2026-92232 Joomla FI
· zachyceno
Mozilla Foundation Security Advisory 2026-100
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-100756, CVE-2026-100757, CVE-2026-100758, CVE-2026-100759, CVE-2026-100760, CVE-2026-100762, CVE-2026-100765, CVE-2026-100766, CVE-2026-100767, CVE-2026-100769, CVE-2026-100770, CVE-2026-100771, CVE-2026-100772, CVE-2026-100773, CVE-2026-100774, CVE-2026-100775, CVE-2026-100776, CVE-2026-100777, CVE-2026-100778, CVE-2026-100779 (+42 other associated CVEs), Summary: Security…
Mozilla FI
· zachyceno
SPOJENO PŘES CVE GitLab Critical Patch Release
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9, CVEs: CVE-2026-89078, CVE-2026-93577, CVE-2026-84739, CVE-2026-92470, CVE-2026-92874, CVE-2026-92530, CVE-2026-8937, CVE-2026-92529, CVE-2026-10518, CVE-2026-4523, CVE-2026-92628, Summary: On September 23, 2026, we released versions 19.4.1, 19.3.3, 19.2.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend…
EPSS 0.01 CVSS 9.9 CVE-2026-10518 CVE-2026-4523 CVE-2026-84739 CVE-2026-89078 CVE-2026-8937 CVE-2026-92470 CVE-2026-92529 CVE-2026-92530 CVE-2026-92628 CVE-2026-92874 CVE-2026-93577 GitLab FI FR
· zachyceno
SPOJENO PŘES CVE Multiples vulnérabilités dans GitLab (30 septembre 2026)
De multiples vulnérabilités ont été découvertes dans GitLab. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un contournement de la politique de sécurité. Gitlab indique que la vulnérabilité CVE-2026-85706 est activement exploitée.
KEV ✓ EPSS 0.97 CVE-2026-85706 GitLab veřejná správa FR CZ NL CA US
Signal adds encypted local backup support to iOS, desktop apps
Signal, the secure messaging app, released version 8.30, completing the rollout of its secure backups feature across all supported operating systems (Android, iOS, Linux, macOS, and Windows). [...]
Signal US
Mozilla security advisory (AV26-976)
Serial number: AV26-976Date: September 29, 2026 As of September 29, 2026, Mozilla is affected by vulnerabilities in the following products: Firefox ESR Versions prior to 153.4 Versions prior to 140.17 Versions prior to 115.42 Firefox Versions prior to 157 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Vulnerabilities fixed in Firefox 157 Security Vulnerabilities fixed in Firefox ESR 153.4…
Mozilla CA
OperTraitors: How Kubernetes Operators Betray Your Security Posture
We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities. The post OperTraitors: How Kubernetes Operators Betray Your Security Posture appeared first on Unit 42.
Kubernetes US
Securing the keys to the kingdom: Announcing Executive Threat Detection
Attackers are using greater sophistication to gain access to high-yield targets like executives, and company-wide security measures can easily miss these subtle, personal attacks.Executive Threat Detection offers protection for up to 10 principals, with monthly custom threat hunts and reports relevant to those principals’ corporate systems.Proactive attention from incident response experts gives executives peace of mind by detecting and stopping long-term, stealthy adversary access.In our…
US
· zachyceno
A Win for Defenders: CrowdStrike and NVIDIA Extend Security Across the AI Stack
Wireshark 4.6.9 Released, (Sun, Sep 27th)
Wireshark release 4.6.9 fixes 19 vulnerabilities and 16 bugs. Didier Stevens Senior handler blog.DidierStevens.com (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Wireshark US
LinkedIn adds new checks for fake profiles and work histories
LinkedIn is adding trust and verification features aimed at making fake professional identities, invented work histories, and company impersonation harder to pull off. The company is responding to an environment in which generative AI enables imposters to create an entirely made-up professional persona. It reduces the cost of creating convincing headshots, biographies, résumés, outreach messages, and recommendations. LinkedIn’s new features use verified people and company Pages to help check…
LinkedIn US
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
US
GitLab security advisory (AV26-962)
Serial number: AV26-962Date: September 25, 2026 As of September 23, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.2.7 Prior to 19.3.3 Prior to 19.4.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7 GitLab release notes | GitLab Docs
GitLab CA
What’s new in Microsoft Security: September 2026
AI agents are now running on employee devices, cloud platforms, and across developer workflows. Security teams need to see those agents, govern what they can reach, and contain them when something goes wrong. This month’s updates help you discover and control local AI agents, extend Zero Trust to agent traffic, and strengthen the security operations center (SOC) foundations that AI-era operations depend on. Here’s what’s new: Extend protection and support investigations with Microsoft Defender…
Microsoft US
Managed or Modified: Choose How Huntress Hardens Microsoft 365
Managed ISPM now offers two deployment modes. Choose fully automated hardening or full control over which Microsoft 365 controls roll out, and when. See how it works.
New Browser Guard features add protection before and after you click
Most of us click on search results without knowing much about the website we’re about to visit. And once we’re there, it’s not always obvious when something isn’t quite right. Now, we’ve added two new features to Malwarebytes Browser Guard that will do even more to keep you safe online. Search Reputation gives you a quick read on your search results, before you even click on anything. And with Scam Guard Lite, you can analyze the contents of a webpage directly from the Browser Guard extension…
Update Chrome: 108 security fixes for desktop, new release for Android
Over the last few days, Google issued several different Chrome updates. On September 22, Google released a Stable Channel Update for Desktop. This is the most important one for desktop users. It brings Chrome to version 154.0.8037.57 for Linux and versions 154.0.8037.57/.58 for Windows and Mac. The update includes 108 security fixes including 11 rated Critical. It will roll out over the coming days and weeks. One day later, Google released Chrome 155 for Android, version 155.0.8059.16, to a…
EPSS 0.01 CVE-2026-95281 CVE-2026-95350 CVE-2026-95357 Google US
No One Gets Phished: The New Group-IB Browser Agent Applies Predictive Intelligence At The Click.
One employee reaches a phishing page. The tab closes, the domain is blocked for every browser in the company, and the targeted password is already being reset. The new Group-IB Browser Agent brings the corporate browser under XDR coverage, checking every page against predictive Threat Intelligence in real time.
Group-IB SG
· zachyceno
Google Chrome - Multiple Severe Vulnerabilities
Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.8, CVEs: CVE-2026-95274, CVE-2026-95275, CVE-2026-95276, CVE-2026-95277, CVE-2026-95278, CVE-2026-95279, CVE-2026-95280, CVE-2026-95281, CVE-2026-95282, CVE-2026-95283, CVE-2026-95284, CVE-2026-95285, CVE-2026-95286, CVE-2026-95287, CVE-2026-95288, CVE-2026-95289, CVE-2026-95290, CVE-2026-95291, CVE-2026-95292, CVE-2026-95293 (+88 other associated CVEs), Summary: Chrome 154 fixes 108 vulnerabilities,…
CVSS 9.8 Google FI
MikroTik security advisory (AV26-958)
Serial number: AV26-958Date: September 23, 2026 As of September 22, 2026, MikroTik is affected by a vulnerability in the following product: RouterOS Prior to 7.25beta5 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. 7.25beta [development] is released!
MikroTik CA
Reimagining the SOC for the agentic era in Microsoft Defender
The physics of cybersecurity are changing. So must the security operations center (SOC). Cyberattackers are using agents to automate execution at unprecedented scale. What once required entire teams now requires a single operator and an agent framework. That shift has exposed a hard truth: security cannot operate at AI speed when protection and operations are built as separate systems. Every handoff, integration, and boundary slows defenders down. Agents inherit that complexity. For agentic…
Microsoft US
NCSC-2026-0391 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Connect en Adobe Connect Android Mobile App
Adobe heeft 9 kwetsbaarheden verholpen in Adobe Connect en de Adobe Connect Android Mobile App. De kwetsbaarheden zijn verholpen in Adobe Connect 12.12 en Adobe Connect Android Mobile App 4.5. De kwetsbaarheden betreffen verschillende beveiligingsproblemen in Adobe Connect, waaronder SQL-injectie, Cross-Site Scripting (XSS), onvoldoende invoervalidatie, path traversal en onvoldoende certificaatvalidatie. De kwetsbaarheden hebben CVSS-scores variërend van middel tot kritiek. Van de in totaal 9…
EPSS 0.01 CVE-2026-34689 CVE-2026-75682 CVE-2026-75684 CVE-2026-75686 CVE-2026-75689 CVE-2026-75697 CVE-2026-75698 Adobe NL