One, tracked as CVE-2026-91231, is in the Adapters component, and enables unauthenticated attackers to compromise Oracle SOA Suite resulting in its takeover, with potential impact on connected products. Two others were in the Fabric Layer component of Oracle SOA Suite:… Read More "Oracle patched 1295 security flaws in October, six rated 10.0"
It could have been even worse for Meta. Under New Mexico law, the damages could have been as high as $219 billion, which would have exceeded its revenue for 2025. Judge Francis Mathew reduced his demand to $25 billion without… Read More "Meta hit with $25 billion fine for illegally sharing user data"
A chain of vulnerabilities in Google’s Chrome browser could have enabled researchers to take control of one billion Windows machines worldwide — and it cost them just $40,000 in AI compute time to discover it. Researchers at Xbow USA worked… Read More "Xbow spent $40K on AI and cracked Google Chrome wide open"
Bank of America has had to spend big on IT in response to an AI security audit and findings that its anti-money-laundering (AML) controls were lacking. The bank was fined a whopping $1.2 billion for money laundering offences this week,… Read More "BofA spent millions on anti-money-laundering tech, still got fined $1.2B"
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are calling for tougher rules and the establishment of a new international body overseeing best practice for AI development.… Read More "Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say"
Tracked as CVE-2026-104935 and rated at CVSS 8.6 out of 10, the vulnerability affects multiple product branches, including Ivanti Connect Secure 22.8R2.4 and earlier, as well as specified 25.1 releases. Ivanti says versions 22.7 and earlier are not affected. Ivanti… Read More "Hackers abuse the Ivanti Connect Secure bug to gain access without accounts"
Nevertheless, it encouraged affected customers to upgrade to patched versions as soon as possible: 13.1-64.29 or later for the 13.1 series, and 14.1-73.46 or later for the 14.1 series of ADC and Gateway, and 13.1.37.283 or later for ADC 13.1-FIPS. … Read More "This week’s critical patch for NetScaler ADC and NetScaler Gateway is here"
MonsterCloud claimed to offer an alternative to paying the ransom. Its website said that, thanks to its decryption techniques, “our team specializes in helping businesses recover their data without succumbing to ransom demands.” However, the indictment alleges that rather than… Read More "Ransomware consultant said he would decrypt data, is accused of paying ransoms instead"
Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously undiscovered vulnerabilities in widely used Java libraries — and now the companies are inviting customers to submit their own code dependencies to… Read More "Lightwell project filters out 400 Java library vulnerabilities"
OpenAI continues to report incidences of “misaligned” behavior by its AI models, with three new reports dropping on Oct. 2. However, they describe relatively minor issues compared to previous alignment reports and notices covering its attacks on Hugging Face, Rubygems,… Read More "OpenAI reports three new incidents of misalignment"
