Openwave Webtop vulnerability CVE-2026-111793 is exploited in the wild, per JPCERT/CC. Upgrade Webtop Media Transcoder to 1.1.22.0 or later.
ModSecurity vulnerabilities CVE-2026-104269 and CVE-2026-73857 now have public details and a proof-of-concept. Upgrade to libmodsecurity 3.0.17.
A modern WinUI Registry Editor prototype surfaced in a Microsoft repo, offering a sleek glimpse into potential Windows 11 interface redesigns.
Apple plans an Apple proactive Siri agent for iOS 28, leveraging native App Intents and overhauled development cycles to challenge rivals.
UnrealIRCd vulnerability CVE-2026-114713 is exploited in the wild, letting users run IRCOp commands. Hot-patch or upgrade to 6.2.7.1 now.
Our weekly CVE report for Nov 2-8, 2026 tracks 3,570 new CVEs and 10 exploited vulnerabilities, including Siemens and Zyxel flaws not in CISA KEV.
A uutils coreutils vulnerability (CVSS 9.9) let translation files inject code; details and a proof-of-concept are now public. Upgrade to uucore 0.12.0.
A proof-of-concept exploit for CVE-2026-97798, a Windows Error Reporting vulnerability, gives a SYSTEM shell. Install the October 2026 update now.
IBM API Connect vulnerabilities: 208 flaws, including authentication bypass CVE-2026-17301 and hard-coded credentials. Apply IBM's fixes now.
Alphabet disclosed a $548M Alphabet Qualcomm stake, highlighting Qualcomm's strategic pivot into AI data centers amid handset revenue declines.
Microsoft winds down its Microsoft AI cloud lease with Oracle and audits $80B in Neocloud contracts to prioritize self-built Azure infrastructure.
OpenAI secured $11 billion at an OpenAI funding valuation of $1.25 trillion, even as broader capital markets temper expectations for AI infrastructure.
Technical details and PoC exploit code for the critical Penpot file takeover flaw are now public. Upgrade to version 2.18.0 now.
Attackers exploit the SonicWall SonicOS SSLVPN flaw CVE-2026-19868 in the wild. Update Gen7 and Gen8 firewalls now to patch CVE-2026-107155 and 6 bugs.
Update your Veeam Software Appliance and Backup & Replication servers now to fix CVE-2026-98432, a critical 9.8 CVSS Linux kernel flaw.