Google Partially Reverses Chrome Bug Bounty Cuts 2026-10-13 at 20:00 By Eduard Kovacs Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Google Partially Reverses Chrome Bug Bounty Cuts Read More »
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild 2026-10-12 at 16:14 By Eduard Kovacs The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites. The post Bricksforge WordPress Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild Read More »
Critical SonicWall Vulnerability Exploited Days After Disclosure 2026-10-12 at 11:36 By Ionut Arghire CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Critical SonicWall Vulnerability Exploited Days After Disclosure Read More »
Unpatched AhsayCBS Vulnerabilities Exploited in the Wild 2026-10-09 at 13:23 By Ionut Arghire The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands. The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Unpatched AhsayCBS Vulnerabilities Exploited in the Wild Read More »
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability 2026-10-09 at 09:53 By Ionut Arghire The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service. The post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability Read More »
Cisco Patches a Dozen Critical Vulnerabilities 2026-10-08 at 18:28 By Ionut Arghire The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution. The post Cisco Patches a Dozen Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Cisco Patches a Dozen Critical Vulnerabilities Read More »
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication 2026-10-08 at 17:04 By Eduard Kovacs Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products. The post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication Read More »
SonicWall and Splunk Patch Critical Vulnerabilities 2026-10-08 at 15:37 By Ionut Arghire Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
SonicWall and Splunk Patch Critical Vulnerabilities Read More »
Chrome 155 Update Patches 247 Vulnerabilities 2026-10-07 at 13:51 By Ionut Arghire Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track. The post Chrome 155 Update Patches 247 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chrome 155 Update Patches 247 Vulnerabilities Read More »
Android’s October 2026 Updates Patch 25 Vulnerabilities 2026-10-07 at 09:55 By Ionut Arghire The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation. The post Android’s October 2026 Updates Patch 25 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Android’s October 2026 Updates Patch 25 Vulnerabilities Read More »
Atlassian Patches Critical Vulnerability Affecting 8 Products 2026-10-07 at 09:37 By Ionut Arghire Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory. The post Atlassian Patches Critical Vulnerability Affecting 8 Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Atlassian Patches Critical Vulnerability Affecting 8 Products Read More »
Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports 2026-10-05 at 17:26 By Eduard Kovacs Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP). The post Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports appeared first on SecurityWeek. This […]
Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports Read More »
Exploitation Hits Rejetto HFS Vulnerability Discovered by AI 2026-10-05 at 14:00 By Ionut Arghire CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Exploitation Hits Rejetto HFS Vulnerability Discovered by AI Read More »
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier 2026-10-05 at 08:14 By Eduard Kovacs Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched. The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first on SecurityWeek. This article is an […]
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier Read More »
Fortra Patches Critical Vulnerabilities in BoKS 2026-10-03 at 14:34 By Ionut Arghire The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Fortra Patches Critical Vulnerabilities in BoKS Read More »
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks 2026-10-02 at 12:34 By Ionut Arghire The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks Read More »
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action 2026-10-02 at 11:07 By Ionut Arghire CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system. The post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action Read More »
AI Has Changed Attack Speed, Not Security Fundamentals 2026-10-01 at 16:15 By Joshua Goldfarb As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. The post AI Has Changed Attack Speed, Not Security Fundamentals appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
AI Has Changed Attack Speed, Not Security Fundamentals Read More »
Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure 2026-10-01 at 15:55 By Ionut Arghire Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction. The post Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure Read More »
Zammad Zero-Days Exploited in AI-Powered DIVD Hack 2026-10-01 at 13:42 By Ionut Arghire The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root. The post Zammad Zero-Days Exploited in AI-Powered DIVD Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Zammad Zero-Days Exploited in AI-Powered DIVD Hack Read More »