News

Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server

• Vulnerability Report

Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server

Do Son October 3, 2026 0

TL;DR The Apache Software Foundation disclosed eight CVEs on October 2, 2026, across three projects. The most...

Read More Read more about Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server

Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

• Vulnerability Report

Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

Do Son October 3, 2026 0

Microsoft has shipped a V2 release of its September 2026 Exchange Server security updates. The only change...

Read More Read more about Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

AWS Fixes Loom for AWS Admin Takeover and SageMaker Unified Studio Code Execution Flaws

• Vulnerability Report

AWS Fixes Loom for AWS Admin Takeover and SageMaker Unified Studio Code Execution Flaws

Do Son October 2, 2026 0

TL;DR AWS published two security bulletins on October 2, 2026, covering four CVEs. Three hit Loom for...

Read More Read more about AWS Fixes Loom for AWS Admin Takeover and SageMaker Unified Studio Code Execution Flaws

Digi DAL OS Vulnerability Lets Unauthenticated Attackers Run Root Commands

• Vulnerability Report

Digi DAL OS Vulnerability Lets Unauthenticated Attackers Run Root Commands

Do Son October 2, 2026 0

TL;DR Digi International disclosed CVE-2026-75937, a critical Digi DAL OS vulnerability scored 9.4 on CVSS 4.0. One...

Read More Read more about Digi DAL OS Vulnerability Lets Unauthenticated Attackers Run Root Commands

Chrome Security Update Fixes Critical WebGL Flaw and 10 Other Bugs

• Vulnerability Report

Chrome Security Update Fixes Critical WebGL Flaw and 10 Other Bugs

Do Son October 2, 2026 0

TL;DR Google pushed Chrome 154.0.8037.97/.98 to the Stable channel with 11 security fixes. The headline bug, CVE-2026-103628,...

Read More Read more about Chrome Security Update Fixes Critical WebGL Flaw and 10 Other Bugs

GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands

• Vulnerability Report

GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands

Do Son October 2, 2026 0

TL;DR GitLab released AI Gateway versions 19.2.4, 19.3.2, and 19.4.1 to fix CVE-2026-90970. The GitLab AI Gateway...

Read More Read more about GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands

Patched NetScaler Appliances Keep Rebooting as Citrix Flags SAML Authentication Issue

• Vulnerability Report

Patched NetScaler Appliances Keep Rebooting as Citrix Flags SAML Authentication Issue

Do Son October 2, 2026 0

TL;DR Citrix admins report NetScaler appliances rebooting repeatedly even after updating to build 14.1-73.37. Citrix now says...

Read More Read more about Patched NetScaler Appliances Keep Rebooting as Citrix Flags SAML Authentication Issue

Seven TP-Link Vulnerabilities Hit Tapo Cameras, Archer and Deco Routers

• Vulnerability Report

Seven TP-Link Vulnerabilities Hit Tapo Cameras, Archer and Deco Routers

Do Son October 2, 2026 0

TL;DR TP-Link published four security advisories on October 1, 2026, covering seven TP-Link vulnerabilities. The worst, CVE-2026-102369,...

Read More Read more about Seven TP-Link Vulnerabilities Hit Tapo Cameras, Archer and Deco Routers

Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk

• Vulnerability Report

Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk

Do Son October 2, 2026 0

TL;DR Moxa disclosed two Moxa MGate vulnerabilities on October 2, 2026. The worse flaw, CVE-2026-86325, scores 9.4...

Read More Read more about Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk

Stirling PDF RCE CVE-2026-85714: Details and PoC Publicly Disclosed

• Vulnerability Report

Stirling PDF RCE CVE-2026-85714: Details and PoC Publicly Disclosed

Do Son October 2, 2026 0

TL;DR Full technical details and a proof-of-concept are now public for CVE-2026-85714, a CVSS 9.1 Stirling PDF...

Read More Read more about Stirling PDF RCE CVE-2026-85714: Details and PoC Publicly Disclosed

OpenAI Fires Safety Researchers Amid Unprompted AI Hacking Incidents

• Technology

OpenAI Fires Safety Researchers Amid Unprompted AI Hacking Incidents

Do Son October 2, 2026 0

For those closely monitoring the trajectory of artificial intelligence, OpenAI appears to be encountering profound difficulties in...

Read More Read more about OpenAI Fires Safety Researchers Amid Unprompted AI Hacking Incidents

UAT-11587 Targets Asian Governments With Antino Backdoor

• Malware

UAT-11587 Targets Asian Governments With Antino Backdoor

Do Son October 2, 2026 0

At a Glance Attribute Details Actor or Group UAT-11587 (suspected China-nexus group; overlaps with Jewelbug) Activity Type...

Read More Read more about UAT-11587 Targets Asian Governments With Antino Backdoor

China-Aligned TA419 Credential Phishing Hits AI Experts

• Cybercriminals

China-Aligned TA419 Credential Phishing Hits AI Experts

Do Son October 2, 2026 0

At a Glance Summary Attribute Details Actor or Group TA419 (China-aligned cyberespionage group) Activity Type Spear-phishing, AitM...

Read More Read more about China-Aligned TA419 Credential Phishing Hits AI Experts

Phishing Abuses RMM Tools for Persistent Network Access

• Cybercriminals

Phishing Abuses RMM Tools for Persistent Network Access

Do Son October 2, 2026 0

At a Glance Summary Attribute Details Actor or Group Unattributed cybercrime operators Activity Type Phishing, dual RMM...

Read More Read more about Phishing Abuses RMM Tools for Persistent Network Access

Dell System Update Flaw CVE-2026-86360 Could Allow Root Code Execution

• Vulnerability Report

Dell System Update Flaw CVE-2026-86360 Could Allow Root Code Execution

Do Son October 2, 2026 0

TL;DR On October 1, Dell fixed five flaws in Dell System Update (DSU), led by a 9.6...

Read More Read more about Dell System Update Flaw CVE-2026-86360 Could Allow Root Code Execution

Zammad Zero-Day Chain CVE-2026-102489 Exploited in the Wild in AI-Driven DIVD Breach

• Vulnerability Report

Zammad Zero-Day Chain CVE-2026-102489 Exploited in the Wild in AI-Driven DIVD Breach

Do Son October 2, 2026 0

TL;DR Attackers chained two Zammad zero-day flaws to break into the Dutch Institute for Vulnerability Disclosure (DIVD)...

Read More Read more about Zammad Zero-Day Chain CVE-2026-102489 Exploited in the Wild in AI-Driven DIVD Breach

Critical Capacitor Flaw CVE-2026-103922 Hits Framework With 5.5M Weekly Downloads

• Vulnerability Report

Critical Capacitor Flaw CVE-2026-103922 Hits Framework With 5.5M Weekly Downloads

Do Son October 2, 2026 0

TL;DR A critical Capacitor vulnerability, CVE-2026-103922, scores 9.3 on CVSS and affects a framework with over 5.5...

Read More Read more about Critical Capacitor Flaw CVE-2026-103922 Hits Framework With 5.5M Weekly Downloads

Sharp Printer Flaw CVE-2024-58388 Exploited in the Wild, PoC Public

• Vulnerability Report

Sharp Printer Flaw CVE-2024-58388 Exploited in the Wild, PoC Public

Do Son October 2, 2026 0

TL;DR A Sharp printer vulnerability, now tracked as CVE-2024-58388, lets unauthenticated attackers read any file on the...

Read More Read more about Sharp Printer Flaw CVE-2024-58388 Exploited in the Wild, PoC Public

Apache HTTP Server 2.4.69 Fixes 20 Flaws, Including mod_vhost_alias Stack Overflow

• Vulnerability Report

Apache HTTP Server 2.4.69 Fixes 20 Flaws, Including mod_vhost_alias Stack Overflow

Do Son October 2, 2026 0

TL;DR On October 1, the Apache Software Foundation released Apache HTTP Server 2.4.69 with fixes for 20...

Read More Read more about Apache HTTP Server 2.4.69 Fixes 20 Flaws, Including mod_vhost_alias Stack Overflow

Critical Foreman RCE Flaw Hits Red Hat Satellite, Plus 389-ds LDAP Bug

• Vulnerability Report

Critical Foreman RCE Flaw Hits Red Hat Satellite, Plus 389-ds LDAP Bug

Do Son October 2, 2026 0

TL;DR Red Hat has disclosed a CVSS 9.9 Foreman RCE flaw that lets low-privileged users run commands...

Read More Read more about Critical Foreman RCE Flaw Hits Red Hat Satellite, Plus 389-ds LDAP Bug

cPanel Security Vulnerabilities Expose WHM Web Servers

• Vulnerability Report

cPanel Security Vulnerabilities Expose WHM Web Servers

Do Son October 2, 2026 0

TL;DR cPanel published security advisories addressing three critical cPanel security vulnerabilities across supported server platforms. Specifically, these...

Read More Read more about cPanel Security Vulnerabilities Expose WHM Web Servers

OpenBao Security Vulnerabilities Enable Code Execution

• Vulnerability Report

OpenBao Security Vulnerabilities Enable Code Execution

Do Son October 2, 2026 0

TL;DR OpenBao maintainers issued security updates to address two critical flaws in the secrets management platform. These...

Read More Read more about OpenBao Security Vulnerabilities Enable Code Execution