2026-10-14 16:00 UTC
Vendor Research
Cisco Security Advisories · indexed 2026-09-14 16:20 UTC
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing. Two of them are known to be actively exploited. For more information, see Cisco Secure Email Gateway SQL…
P30
2026-10-14 16:00 UTC
Vendor Research
Cisco Security Advisories · indexed 2026-10-14 16:15 UTC
On October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Expressway Series (security hardening release) IOS XR Software for ASR 9000 Series Routers Secure Client Snort (security hardening release) Unified Communications products (security hardening release) To remediate vulnerabilities to be disclosed on October 21, 2026, Cisco strongl…
P0
2026-10-14 16:00 UTC
Vendor Research
Cisco Security Advisories · indexed 2026-10-14 16:15 UTC
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write…
P5
2026-10-14 15:15 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-10-14 15:30 UTC
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability. The post ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw appeared first on SecurityWeek.
P0
2026-10-14 14:01 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-14 14:50 UTC
Microsoft Patch Tuesday security updates for October 2026 address a record 1,415 vulnerabilities. Prioritize the exploited zero-day, critical bugs and potentially wormable vulnerabilities. Microsoft just shattered every patch record in the book. October 2026 brought us a staggering 1,415 new CVEs from Microsoft alone. “Well, it’s a new record release from Microsoft, again. This is […]
P45
2026-10-14 12:58 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-14 13:00 UTC
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]
P25
2026-10-14 12:35 UTC
Security Journalism
The Record · indexed 2026-10-14 12:45 UTC
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
P0
2026-10-14 12:30 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-14 12:50 UTC
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability. The security flaw, tracked as CVE-2026-104935 (CVSS score: 8.6), is a case of authentication bypass impacting ICS
P40
2026-10-14 10:15 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-14 10:30 UTC
Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network compromise. On October 5, Volexity started investigating suspicious activity at one of its monitoring customers and traced everything back to an Ivanti Connect Secure VPN appliance running version 22.8R2.4, the latest build available at the time. Three chained […]
P25
2026-10-14 07:46 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-14 09:20 UTC
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine. The bug is tracked as CVE-2026-74580 and named Vghost. Tencent Zhuque Lab, which found the
P5
2026-10-14 07:16 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-10-14 07:30 UTC
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.
P50
2026-10-14 04:34 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-14 05:10 UTC
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Server. Of these, more than 670 relate to privilege escalation, followed by over 300 remote code
P10
2026-10-14 00:00 UTC
Government
CERT-FR Alerts · indexed 2026-10-14 16:10 UTC
Une vulnérabilité a été découverte dans Ivanti Connect Secure (ICS). Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité. Ivanti indique que cette vulnérabilité CVE-2026-104935 est...
P5
2026-10-13 22:29 UTC
Security Journalism
Dark Reading · Tara Seals · indexed 2026-10-13 22:45 UTC
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
P30
2026-10-13 21:40 UTC
Vendor Research
Rapid7 · Adam Barnett · indexed 2026-10-13 22:50 UTC
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well a…
P65
2026-10-13 21:33 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-10-13 21:45 UTC
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]
P20
2026-10-13 21:05 UTC
Vendor Research
Cisco Security Advisories · indexed 2026-09-08 16:35 UTC
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access to an affected device to bypass UEFI Secure Boot validation checks and execute unauthorized software. This vulnerability is due to the availability of memory write commands in the UEFI Shell while UEFI…
P5
2026-10-13 19:56 UTC
Security Journalism
BleepingComputer · Lawrence Abrams · indexed 2026-10-13 20:10 UTC
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]
P30
2026-10-13 19:25 UTC
Community
SANS Internet Storm Center · indexed 2026-10-13 19:50 UTC
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today's patch Tuesday, and one is already exploited.
P0
2026-10-13 18:43 UTC
Security Journalism
Security Week · Eduard Kovacs · indexed 2026-10-13 18:50 UTC
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges. The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek.
P45
2026-10-13 18:14 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-10-13 18:50 UTC
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Ivanti Connect Secure FortiMail flaw, tracked as CVE-2026-104935 (CVSS score of 8.6), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is an authentication bypass issue caused by […]
P45
2026-10-13 17:49 UTC
Vendor Research
Tenable Blog · Research Special Operations · indexed 2026-10-14 00:50 UTC
69Critical1337Important0Moderate1LowMicrosoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates include patches for two zero days, including one that was exploited in the wild.Microsoft patched 1,407 CVEs in its October 2026 Patch Tuesday release, with 69 rated critical, 1,337 rated as important, and one rated as low.This month’s update includes patches for 301 products and com…
P65
2026-10-13 17:33 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-13 19:05 UTC
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to "act immediately." A fix for the third is still pending, according to Volexity. Volexity, which reported the flaws to Ivanti,
P25
2026-10-13 17:28 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-10-13 19:05 UTC
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,
P0
2026-10-13 17:06 UTC
Vendor Research
Rapid7 · Rapid7 · indexed 2026-10-13 17:30 UTC
OverviewOn October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands.Ivanti reports that exploitation in the wild has already occurred prior to disclosure, affecting a limited number of customers. This indicates that exploitation has been occurring as a zero-d…
P90
2026-10-13 16:18 UTC
Security Journalism
The Record · indexed 2026-10-13 16:25 UTC
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.
P0
2026-10-13 15:45 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-13 15:50 UTC
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. [...]
P45
2026-10-13 15:20 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-10-13 15:25 UTC
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
P15
2026-10-13 14:30 UTC
Other
Check Point Research · etal · indexed 2026-10-13 14:50 UTC
TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the […] The post When LLM Gateways Go Wrong: Findings from LiteLLM appeared…
P5
2026-10-13 13:51 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-10-13 13:55 UTC
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [...]
P5
