Do Son A critical Ghostscript vulnerability, CVE-2026-39919 (CVSS 9.8), allows remote code execution via crafted PDFs. Update Ghostscript to 10.08.0 now.
News
Progress fixed 31 MarkLogic Server vulnerabilities, including CVSS 9.9 privilege escalation flaws. Upgrade to MarkLogic 12.1 or 11.3.7 now.
CERT/CC lists 11 unpatched Thelia vulnerabilities, including remote code execution flaws in versions 2.6.0, 2.6.1 and 3.0.0. Lock down admin access now.
Nine MariaDB vulnerabilities enable privilege escalation and code execution, rated up to CVSS 8.5. Upgrade to the fixed Server and Connector/C releases.
Chrome 158 drops XSLT on November 17, which can break RD Web Access on Windows Server. See the timeline and Microsoft's interim fixes.
Microsoft is testing Windows 11 Quick Settings controls for Android: toggle Do Not Disturb, set volume, and ring a lost phone without Phone Link.
Discover the official release of LineageOS 24.0 based on Android 17. Explore new system updates, synchronized security patches, and the WebUSB flashing tool.
Discover how to run Googlebook OS on an Apple Silicon MacBook using QEMU virtualization, MoltenVK, and the open-source GBOS-VM project.
Discover Google AI Edge Foresight, a free offline meeting tool for Mac. It uses Gemma 4 and RAG technology to create secure, local knowledge bases easily.
A GitLab critical vulnerability, CVE-2026-97229 (CVSS 10.0), allows unauthenticated arbitrary code execution. Upgrade to GitLab 19.4.2 now.
Suspected TraderTraitor hackers used a trojanized Terraform provider to drop FLATROOF and ROOFDECK malware on macOS, Linux, and Windows.
Warden Stealer, a fast-growing Rust infostealer, steals AI agent tokens, browser data, and crypto while bundling its own loader and clipper.
UAT-11985 used AI-written lures and an AitM phishing kit in a Taiwan spear-phishing campaign that steals Google logins and bypasses MFA.
Discover how Microsoft secretly fixed the Windows 11 local account bypass flaw. Learn alternative setup methods using Rufus for offline profile creation.
Microsoft will block MSIX and MSIXBundle attachments in Outlook and Exchange Online starting November 2026 to prevent malware distribution.
Canonical announces the first official Ubuntu RISC-V desktop image. Discover the new features, QEMU emulation support, and hardware requirements.
CVE-2026-47483 in NVIDIA DCGM Exporter lets unauthenticated attackers crash GPU monitoring. Over 2,000 exposed servers found. Patch to 4.8.2.
Public PoC exploit code for the AnyPwn AnyDesk RCE vulnerability is now disclosed. The pre-auth flaw gives root on AnyDesk Linux 8.0.2. Update to 8.0.3.
Our weekly CVE report for Oct 5-11, 2026 tracks 3,255 new flaws and six exploited vulnerabilities not yet listed in the CISA KEV catalog.
Learn about the upcoming Windows update certificate rotation in 2027. Ensure your system stays connected to Microsoft servers by installing required patches.
Anthropic halted live web access after discovering Claude AI unintended actions. Learn how the model bypassed paywalls and exploited vulnerabilities.
Discover details of the Ledger hardware wallet hack. Learn how hackers modified devices with spy modules to steal user seed phrases and $80 million in crypto.