-
The detected exploitation attempts targeting two critical PHP vulnerabilities on October 17, 2026, four days before their public disclosure and security updates. Tracked as CVE-2026-109618 and CVE-2026-109619, the vulnerabilities are collectively calle…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
GitLab has released emergency security updates to address a critical remote code execution vulnerability that could allow unauthenticated attackers to execute arbitrary code on affected servers. This flaw, tracked as CVE-2026-110264, carries the maximu…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google released Chrome version 156 to the stable channel for Windows, macOS, and Linux, addressing 353 security vulnerabilities, including six critical flaws. Announced on October 20, 2026, this update addresses memory corruption, use-after-free errors…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical vulnerability in Fortinet FortiSIEM. This vulnerability allows unauthenticated attackers to turn arbitrary file writes into remote code execution. Researcher Zac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Oracle has released its October 2026 Critical Patch Update, which includes 1,295 new security patches across its enterprise portfolio. Published on October 20, the advisory addresses vulnerabilities in Oracle software as well as third-party components….
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Apache disclosed eight vulnerabilities in Tomcat, including authentication bypass, cross-user data exposure, insecure socket access, and cryptographic configuration failures. Of these, three are rated Important, and five are rated Low. Fixes are availa…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0. This warning, published on October 20, 2026, advises administrators to prepare for immediate upgrades. Additionally,…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
RedAgents, a cloud platform that deploys multiple AI penetration testing agents against authorized targets to discover vulnerabilities and test attack paths. Announced on October 16, 2026, the service brings Artex Pro, Cyber(YanJi), Yanxun, and CyberSt…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has released Chrome 155 for Windows, macOS, and Linux, addressing 37 security vulnerabilities, including seven critical flaws. Announced on October 13, 2026, this desktop update resolves weaknesses across various browser components, including gr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections under various access conditions. Microsoft is the assigning authority, with a release date of October …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
