-
Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote, unauthenticated attackers to execute arbitrary commands. The company dis…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then searched the affected network for credentials and sensitive Active Directory data. Volexity attribut…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked as CVE-2026-108185, could allow an unauthenticated attacker with network access to disclose sensitive information…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as CVE-2026-105445 and dubbed GhostPat, exploited how Docker handled personal access tokens during ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Meta removed more than 3.7 million Facebook and Instagram accounts, Pages, and Groups during an international crackdown on West African scam networks that resulted in 28 arrests and the rescue of 117 trafficking victims. Announced October 13, the opera…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A search for PuTTY can lead to more than a fake download. In a campaign reported on October 12, attackers used search-engine optimization (SEO) poisoning to steer users to a counterfeit PuTTY site and deliver a trojanized Windows installer. The campaig…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has addressed a vulnerability in Windows Shell that attackers are actively exploiting, allowing them to bypass the Mark of the Web (MOTW) security protections. Designated CVE-2026-96951, the flaw was disclosed on October 13, 2026, during the …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
TFG London has confirmed a cybersecurity incident affecting the IT systems that support its brands Hobbs, Whistles, and Phase Eight. Several of these systems remain unavailable. The parent company, The Foschini Group, disclosed the incident in a stock …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI and CrowdStrike have disrupted U.S. laptop farms supporting FAMOUS CHOLLIMA, a North Korean operation that places fraudulent remote IT workers inside American companies. The infrastructure enabled workers abroad to collect salaries, conceal the…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An OpenAI engineer has been arrested for allegedly concealing an audio recording device in an executive conference room at the company’s San Francisco offices. According to a Justice Department announcement, Abdulrahman Alfozan, 35, a Saudi national, w…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
