Google and Mozilla have released fresh security updates for Chrome and Firefox users, resolving a total of 115 vulnerabilities. The new Chrome 153 release patches 42 security defects, including three critical-severity and 28 high-severity bugs. The critical flaws include CVE-2026-91726,… Read More "Chrome, Firefox Updates Patch 115 Vulnerabilities"
Enterprises Warned of Attacks Exploiting WSO2 Vulnerability
A critical WSO2 vulnerability patched earlier this year is now being exploited in the wild by threat actors seeking access to sensitive enterprise data. WSO2 is an open source middleware platform that enables organizations to design, secure, integrate, and manage… Read More "Enterprises Warned of Attacks Exploiting WSO2 Vulnerability"
Oracle Patches 800+ Vulnerabilities in September 2026 Security Update
Oracle on Tuesday announced the release of 673 new security patches as part of its September 2026 Critical Security Patch Update (CSPU). The security updates appear to resolve more than 800 vulnerabilities: there are 672 unique CVEs in the 17… Read More "Oracle Patches 800+ Vulnerabilities in September 2026 Security Update"
Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases
Apple on Monday announced patches for a record number of vulnerabilities across its desktop and mobile operating systems, including more than 200 flaws patched with the latest major releases: iOS 27 and macOS Golden Gate 27. iOS 27 and iPadOS… Read More "Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases "
Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation
Cisco warned customers on Monday that a zero-day vulnerability affecting Secure Email Gateway appliances has been exploited in the wild. The vulnerability is identified as CVE-2026-76461 and has a CVSS score of 9.8. Cisco describes it as an email parsing… Read More "Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation"
Three JFrog Artifactory Flaws Exploited for Backdoor Deployment
Threat actors have been exploiting three high-severity vulnerabilities in JFrog Artifactory to compromise deployments and install backdoors, cybersecurity firm Wiz reports. Many organizations use Artifactory to manage software artifacts, binaries, AI models, containers, and packages. The three flaws, CVE-2026-42016, CVE-2026-42018,… Read More "Three JFrog Artifactory Flaws Exploited for Backdoor Deployment"
Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution
A critical-severity vulnerability in Sogou Input Method has been exploited by a Chinese threat actor to deploy a backdoor, Gen Threat Labs reports. Developed by Tencent, Sogou Input Method is one of the most popular Chinese-language input method editors (IMEs)… Read More "Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution"
ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks
ConnectWise has released urgent patches for a critical-severity vulnerability in the ScreenConnect remote access and support software that has been exploited in worm-like attacks. Tracked as CVE-2026-84869 (CVSS score of 9.9/10), the security defect is described as a missing authorization… Read More "ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks"
PaperCut Flaws Exploited in AI-Powered Attacks
Two recent PaperCut NG/MF vulnerabilities have been exploited in AI-powered attacks that hit hundreds of organizations worldwide, GreyNoise reports. Tracked as CVE-2026-82078 and CVE-2026-81578, the security defects were disclosed on August 27 as zero-days and patched the next day. They… Read More "PaperCut Flaws Exploited in AI-Powered Attacks"
Check Point Patches Critical VPN Vulnerabilities
Cybersecurity firm Check Point this week announced patches for two critical-severity vulnerabilities in its gateway and firewall products using VPN functionality. Tracked as CVE-2026-85102 and CVE-2026-85103 (CVSS score of 9.8), both security defects could be exploited without authentication for remote… Read More "Check Point Patches Critical VPN Vulnerabilities"