October 2026

SolarWinds Avior pairs IT automation with human approval and audit trails

SolarWinds Avior pairs IT automation with human approval and audit trails 2026-10-14 at 13:27 By Industry News SolarWinds has announced the launch of Avior, a standalone, goal-oriented agentic AI system purpose-built for mission-critical IT environments. Built on the SolarWinds Platform, Avior will help IT teams securely define goals, coordinate specialized agents, and track progress toward […]

SolarWinds Avior pairs IT automation with human approval and audit trails Read More »

Chainguard Harness uses frontier AI to test running applications for vulnerabilities

Chainguard Harness uses frontier AI to test running applications for vulnerabilities 2026-10-14 at 13:16 By Industry News Chainguard has announced Chainguard Harness, a new cyber harness that uses frontier AI models like Anthropic’s Claude Mythos 5.1 to find and fix exploitable vulnerabilities in an organization’s application code. Harness builds an application from an organization’s source […]

Chainguard Harness uses frontier AI to test running applications for vulnerabilities Read More »

Scytale MCP gives AI tools scoped, read-only access to compliance data

Scytale MCP gives AI tools scoped, read-only access to compliance data 2026-10-14 at 13:15 By Industry News Scytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer’s AI tools directly to their compliance program. With Scytale MCP, tools such as Claude and ChatGPT can query live compliance data […]

Scytale MCP gives AI tools scoped, read-only access to compliance data Read More »

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host 2026-10-14 at 12:59 By A flaw in Linux’s vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an […]

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host Read More »

GitHub adopts cheaper AI model to catch secrets developers leave in code

GitHub adopts cheaper AI model to catch secrets developers leave in code 2026-10-14 at 12:26 By Anamarija Pogorelec GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its […]

GitHub adopts cheaper AI model to catch secrets developers leave in code Read More »

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances 2026-10-14 at 11:59 By Zeljka Zorz A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October […]

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances Read More »

OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings

OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings 2026-10-14 at 11:40 By Sinisa Markovic A recording device wrapped in toilet paper and plugged into the back of a television in an executive conference room at OpenAI’s San Francisco office has led to the arrest of one of the company’s engineers. Abdulrahman Alfozan, […]

OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings Read More »

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave 2026-10-14 at 11:31 By Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave, an isolated […]

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave Read More »

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) 2026-10-14 at 10:53 By Zeljka Zorz In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be […]

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) Read More »

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise 2026-10-14 at 10:38 By Ionut Arghire Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise Read More »

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products 2026-10-14 at 10:26 By Ionut Arghire Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products Read More »

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day 2026-10-14 at 10:16 By Eduard Kovacs The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek. This article is an excerpt from […]

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day Read More »

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room 2026-10-14 at 09:20 By A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company’s San Francisco offices to covertly record sensitive conversations. Abdulrahman Alfozan, 35, has been charged […]

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room Read More »

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities 2026-10-14 at 09:12 By Ionut Arghire The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities Read More »

Patching and preventing issues: What are the lessons you can learn?

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

Meshery: Open-source cloud-native manager for Kubernetes

Meshery: Open-source cloud-native manager for Kubernetes 2026-10-14 at 08:00 By Anamarija Pogorelec Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and applications on a visual canvas, check the design, […]

Meshery: Open-source cloud-native manager for Kubernetes Read More »

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug 2026-10-14 at 07:34 By Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 […]

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug Read More »

Most companies count AI agents as insiders, and CISOs worry about their own liability

Most companies count AI agents as insiders, and CISOs worry about their own liability 2026-10-14 at 07:30 By Anamarija Pogorelec Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent or other autonomous system was linked […]

Most companies count AI agents as insiders, and CISOs worry about their own liability Read More »

Scroll to Top