Security Alerts & Patches

2+ hour, 17+ min ago   (351+ words) Microsoft started the global release of the Windows 11 version 26H2 operating system update from Redmond, Washington, delivering the package as the official feature release for the second half of 2026. The deployment delivers accumulated system enhancements through a compact enablement package that…...

2+ hour, 23+ min ago   (492+ words) Dell’s security team has had a busy week. The company has announced a slew of Common Vulnerabilities and Exposures (CVEs) impacting its Dell Container Storage Modules (CSM) and Dell System Update (DSU). Disclosed by Dell in two security notices, these…...

1+ hour, 52+ min ago   (125+ words) An authenticated tenant with basic namespace permissions can break out to the host control plane in OpenShift clusters running Multicluster Engine with HyperShift. No exec-provider stripping, no AuthProvider validation, no InsecureSkipTLSVerify guard. A tenant embeds a malicious exec plugin in…...

9+ hour, 47+ min ago   (108+ words) einpresswire.com There were 1,755 press releases posted in the last 24 hours and 494,876 in the last 365 days. XTAL PIM Brings AI Catalog Management to Multi-Channel Retailers Centralizes ERP product data, enriches it with AI, and auto-publishes to sales channels. EIN Presswire…...

15+ hour, 51+ min ago   (329+ words) A newly disclosed security vulnerability in OpenIdentityPlatform OpenAM could allow attackers to make vulnerable authentication servers send requests to internal systems and resources. Tracked as CVE-2026-105122, the flaw affects OpenAM versions before 16.1.3 and is classified as a server-side request forgery…...

9+ hour, 33+ min ago   (1222+ words) Denmark ’s Population Registry Breached, 8.8 Million Affected U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog MI5 Raises Alarm Over Chinese Funding of UK Academic Research Iranian hacker accused of draining 31TB from university inboxes extradited to the US…...

15+ hour, 10+ min ago   (616+ words) A critical heap-buffer-overflow vulnerability in libheif could allow authenticated WordPress users to achieve remote code execution by uploading a specially crafted HEIC image through the standard Media Library workflow. The issue, tracked as GHSA-x8r2-mggj-j6wr, affects the library’s uncompressed-image (unci)…...

12+ hour, 27+ min ago   (707+ words) A malicious HEIC image can become a route to remote code execution on a WordPress server. Researchers have demonstrated an attack chain that turns a normal Media Library upload into code execution in the PHP-FPM process that runs the site....

10+ hour, 25+ min ago   (322+ words) Operators of Rejetto HFS versions 3.0.0 through 3.2.0 should update to version 3.2.1 or later immediately. The patch has been available since July 2026; there is no excuse for waiting. Zach Hanley, chief attack engineer at AI-assisted penetration testing firm Horizon3, published a technical write-up…...

11+ hour, 21+ min ago   (444+ words) We couldn't find any blog articles matching your search. Try searching for other cybersecurity topics or keywords. Fortbridge published a working end-to-end exploit that leaks ASLR addresses through WordPress image derivatives to run commands as www-data. Vivek is a staff…...