-
Critical FortiSandbox Vulnerability Lets Remote Attackers Bypass Authentication and Execute Commands
Fortinet has disclosed a critical authentication bypass vulnerability in FortiSandbox that could let remote attackers access its web management interface without valid credentials and execute unauthorized code or commands. This vulnerability is tracked…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft’s October 2026 Patch Tuesday security updates address 1,411 vulnerabilities across its product portfolio, including three zero-day flaws that enterprise defenders must address immediately. This unusually large update cycle affects various Mic…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A single visit to a compromised or deceptive website can let a sophisticated exploit kit take control of a vulnerable iPhone. On the Packet Protector podcast, mobile security architect Akili Akridge warned that Coruna and DarkSword demonstrate how surv…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hundreds of French supermarkets experienced refrigeration disruptions after hackers reportedly manipulated control systems overnight, destroying fresh and frozen food. Intermarché, Netto, Coopérative U, and Leclerc stores were among those affected, wit…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
SAP’s Security Patch Day on October 13, 2026, addresses critical vulnerabilities found in enterprise applications, integration platforms, and developer libraries. The October bulletin details the release, which includes 16 new security notes, four GitH…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A flaw in npm’s Trusted Publishing mechanism could let attackers publish malicious updates to legitimate packages without compromising a developer’s npm account, GitHub account, or publishing token. Researchers identified more than 1,500 potentially ex…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic researchers have raised concerns that small artificial intelligence models could soon replicate autonomously across consumer Internet of Things (IoT) devices. This development may lead to decentralized networks that operate independently of d…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly marketed macOS malware-as-a-service platform, ICMacOS, is using fake Apple system dialogs to steal login passwords before deploying an information stealer that has evolved into a persistent remote-access trojan (RAT). The operator markets the t…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors are exploiting two critical zero-day vulnerabilities in Citrix NetScaler to deploy a modified version of the open-source Platypus remote administration framework on compromised Application Delivery Controller (ADC) and Gateway appliances….
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Researchers have identified 253 verified security vulnerabilities affecting 343 AI agent tools across 118 Model Context Protocol (MCP) servers. These vulnerabilities expose weaknesses in how software processes arguments generated by large language mode…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶