https://threattimes.com/category/vulnerabilities/ahsaycbs-hotfixes-address-auth-bypass-and-rce/Threat Timesen2026-10-14T17:20:12ZAhsayCBS Hotfixes Address Auth Bypass and RCE Chain Exploited In-The-Wildhttps://threattimes.com/category/vulnerabilities/critical-severity-stack-based-buffer-overflow-2/Threat Timesen2026-10-14T17:10:50ZCritical-Severity Stack-Based Buffer Overflow Flaw in Juniper Networks Junos OS Tracked as CVE-2026-102182https://threattimes.com/category/vulnerabilities/cve-2026-33789-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T17:10:50ZCVE-2026-33789: Stack-Based Buffer Overflow Flaw in Juniper Networks Junos OS Scores 9.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-33792-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T17:10:50ZCVE-2026-33792: Stack-Based Buffer Overflow Flaw in Juniper Networks Junos OS Scores 9.8 on CVSShttps://threattimes.com/category/vulnerabilities/critical-severity-stack-based-buffer-overflow/Threat Timesen2026-10-14T17:10:50ZCritical-Severity Stack-Based Buffer Overflow Flaw in Juniper Networks Junos OS Tracked as CVE-2026-33796https://threattimes.com/category/vulnerabilities/microsoft-discloses-cve-2026-84012-remote-code/Threat Timesen2026-10-14T17:03:14ZMicrosoft Discloses CVE-2026-84012 Remote Code Execution Flaw in Remote Desktop Serviceshttps://threattimes.com/category/vulnerabilities/cve-2026-102031-os-command-injection-flaw-in/Threat Timesen2026-10-14T16:59:36ZCVE-2026-102031: Os Command Injection Flaw in Juniper Networks Junos OS Evolved Scores 9.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-102175-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:59:36ZCVE-2026-102175: Heap-Based Buffer Overflow Flaw in Juniper Networks Junos OS Scores 9.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-102178-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:59:36ZCVE-2026-102178: Stack-Based Buffer Overflow Flaw in Juniper Networks Junos OS Scores 9.8 on CVSShttps://threattimes.com/category/vulnerabilities/lantronix-xpress-dr-missing-authentication-flaw/Threat Timesen2026-10-14T16:54:50ZLANTRONIX XPress-DR Missing Authentication Flaw (CVE-2026-109439) Rated CVSS 9.3https://threattimes.com/category/tech/google-waives-25-fee-for-private-ai-studio-apps/Threat Timesen2026-10-14T16:45:58ZGoogle waives $25 fee for private AI Studio apps on Play Storehttps://threattimes.com/category/vulnerabilities/microsoft-october-patch-tuesday-fixes-record-1/Threat Timesen2026-10-14T16:45:58ZMicrosoft October Patch Tuesday Fixes Record 1,413 Flaws, Including Exploited Zero-Dayhttps://threattimes.com/category/vulnerabilities/cve-2026-101950-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:42:37ZJuniper Junos OS Heap Overflow Lets Attackers Crash SRX Firewallshttps://threattimes.com/category/vulnerabilities/cve-2026-101990-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:42:37ZCVE-2026-101990: Stack-Based Buffer Overflow Flaw in Juniper Networks Junos OS Scores 9.8 on CVSShttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-cisco-secure-email/Threat Timesen2026-10-14T16:31:11ZCritical-Severity Flaw in Cisco Secure Email Tracked as CVE-2026-76519https://threattimes.com/category/vulnerabilities/cve-2026-77524-improper-privilege-management-flaw/Threat Timesen2026-10-14T16:31:11ZCVE-2026-77524: Improper Privilege Management Flaw in kedacore keda Scores 9.9 on CVSShttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-juniper-networks-junos/Threat Timesen2026-10-14T16:31:11ZCritical-Severity Flaw in Juniper Networks Junos OS Tracked as CVE-2026-101980https://threattimes.com/category/vulnerabilities/juniper-networks-junos-os-improper-authentication/Threat Timesen2026-10-14T16:31:11ZJuniper Networks Junos OS Improper Authentication Flaw (CVE-2026-101956) Rated CVSS 9.8https://threattimes.com/category/vulnerabilities/cve-2026-101986-improper-authentication-flaw-in/Threat Timesen2026-10-14T16:31:10ZJuniper Junos OS J-Web Flaw Lets Attackers Bypass Authenticationhttps://threattimes.com/category/vulnerabilities/drupal-core-critical-remote-code-execution-sa/Threat Timesen2026-10-14T16:11:03ZDrupal core - Critical - Remote code execution - SA-CORE-2026-014https://threattimes.com/category/vulnerabilities/cisco-secure-email-gateway-and-secure-email-and/Threat Timesen2026-10-14T16:04:38ZCisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026https://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-3/Threat Timesen2026-10-14T16:02:10ZCritical-Severity Improper Authentication Flaw in zulip Tracked as CVE-2026-102893https://threattimes.com/category/vulnerabilities/dokku-flaw-cve-2026-86002-rated-cvss-9/Threat Timesen2026-10-14T16:02:10Zdokku Flaw (CVE-2026-86002) Rated CVSS 9https://threattimes.com/category/vulnerabilities/high-severity-path-traversal-flaw-in-c4illin/Threat Timesen2026-10-14T16:01:08ZCisco Fixes Critical File Write Flaw in Secure Email Gatewayhttps://threattimes.com/category/vulnerabilities/cve-2026-91881-flaw-in-dell-terraform-provider/Threat Timesen2026-10-14T15:23:47ZCVE-2026-91881: Flaw in Dell Terraform Provider for Redfish Scores 9 on CVSShttps://threattimes.com/category/vulnerabilities/cert-cc-vu-948176-multiple-tls-libraries-can/Threat Timesen2026-10-14T15:15:34ZCERT/CC: VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcementhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-410595-google-boringssl-name/Threat Timesen2026-10-14T15:15:34ZCERT/CC: VU#410595: Google BoringSSL Name Constraints Bypass in SAN Validation Logichttps://threattimes.com/category/tech/judge-grants-apple-access-to-openai-hiring-docs/Threat Timesen2026-10-14T15:12:52ZJudge grants Apple access to OpenAI hiring docs in trade secret suithttps://threattimes.com/category/tech/microsoft-october-patch-fixes-1-410-flaws-ends/Threat Timesen2026-10-14T14:33:57ZMicrosoft October Patch Fixes 1,410 Flaws, Ends Windows 11 24H2 Supporthttps://threattimes.com/category/vulnerabilities/cve-2020-37282-os-command-injection-flaw-in/Threat Timesen2026-10-14T14:31:35ZNode.js office-converter Library Exposes Critical Command Injection Flawhttps://threattimes.com/category/vulnerabilities/gravitee-api-management-flaw-cve-2020-37281-rated/Threat Timesen2026-10-14T14:31:35ZGravitee API Management Flaw (CVE-2020-37281) Rated CVSS 9.2https://threattimes.com/category/vulnerabilities/cve-2026-110612-flaw-in-wwwlike-vlife-scores-9-3/Threat Timesen2026-10-14T14:31:35Zvlife Authentication Bypass Allows Unauthenticated Super Admin Accesshttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authentication-flaw-in-4/Threat Timesen2026-10-14T14:31:35ZCritical-Severity Missing Authentication Flaw in nullclaw NullHub Tracked as CVE-2026-110616https://threattimes.com/category/vulnerabilities/critical-severity-server-side-request-forgery-3/Threat Timesen2026-10-14T14:31:35ZCritical-Severity Server-Side Request Forgery Flaw in kanbn kan Tracked as CVE-2026-110628https://threattimes.com/category/vulnerabilities/critical-severity-missing-authentication-flaw-in-3/Threat Timesen2026-10-14T14:31:35ZCritical-Severity Missing Authentication Flaw in MyReport Updater Tracked as CVE-2026-110632https://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-moghtech-komodo-tracked/Threat Timesen2026-10-14T14:31:35ZKomodo 2.3.3 Authentication Bypass Lets Attackers Execute Root Commandshttps://threattimes.com/category/vulnerabilities/scionoftech-webp-converter-os-command-injection/Threat Timesen2026-10-14T14:31:35ZCritical Command Injection Flaw Found in Node.js webp-converter Libraryhttps://threattimes.com/category/vulnerabilities/danday74-git-diff-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35ZCritical Command Injection Flaw Found in Popular Node.js git-diff Libraryhttps://threattimes.com/category/vulnerabilities/revolunet-pypdftk-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35Zpypdftk Library Critical Command Injection Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/zepspaiva-doc-recog-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35Zdoc-recog Library Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/mborne-extract-os-command-injection-flaw-cve-2026/Threat Timesen2026-10-14T14:31:35ZCritical Command Injection Flaw Found in @mborne/extract Node.js Libraryhttps://threattimes.com/category/vulnerabilities/cve-2026-110640-os-command-injection-flaw-in/Threat Timesen2026-10-14T14:31:35ZWhisper-node 1.1.1 Has Critical Command Injection Flaw Allowing Arbitrary Command Executionhttps://threattimes.com/category/vulnerabilities/chetanxpro-nodejs-whisper-os-command-injection/Threat Timesen2026-10-14T14:31:35ZNodejs-whisper Library Has Critical Command Injection Flawhttps://threattimes.com/category/vulnerabilities/kky-ykk-transcribe2texts-os-command-injection/Threat Timesen2026-10-14T14:31:35Ztranscribe2texts 1.0.6 Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-9/Threat Timesen2026-10-14T14:31:35ZVideo-stitch Library Critical OS Command Injection Flaw Exposes Node.js Process Privilegeshttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-8/Threat Timesen2026-10-14T14:31:35ZCritical-Severity Os Command Injection Flaw in beganovich snappdf Tracked as CVE-2026-110646https://threattimes.com/category/vulnerabilities/shahkashani-stills-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35ZStills Media Processing Tool Exposes Users to Critical Command Injectionhttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-7/Threat Timesen2026-10-14T14:31:35ZThumbnail Python Package Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/corelight-researchers-detail-windows-kernel-crash/Threat Timesen2026-10-14T14:10:43ZCorelight Researchers Detail Windows Kernel Crash Flaw in CVE-2026-70111https://threattimes.com/category/vulnerabilities/channel-software-weballiance-ecommerce-sql/Threat Timesen2026-10-14T13:51:19ZChannel Software WebAlliance eCommerce Sql Injection Flaw (CVE-2026-108065) Rated CVSS 9.8https://threattimes.com/category/ai/recruiters-cite-identical-ai-resumes-as-top/Threat Timesen2026-10-14T13:41:49ZRecruiters cite identical AI resumes as top stressor in Employ reporthttps://threattimes.com/category/vulnerabilities/tr7-asp-missing-authentication-flaw-cve-2026/Threat Timesen2026-10-14T13:04:13ZTR7 ASP Critical Flaw Allows OS Command Injection Without Authenticationhttps://threattimes.com/category/cyber-attacks/imf-warns-ai-spending-bust-could-trigger-global/Threat Timesen2026-10-14T12:51:19ZIMF warns AI spending bust could trigger global financial instabilityhttps://threattimes.com/category/vulnerabilities/tr7-asp-os-command-injection-flaw-cve-2026-16741/Threat Timesen2026-10-14T12:48:09ZNVD Rates TR7 ASP CVE-2026-16741 Critical 9.8 CVSS for OS Command Injection in Pre-1.6 Fixeshttps://threattimes.com/category/vulnerabilities/cert-cc-vu-166125-bisheng-has-authentication/Threat Timesen2026-10-14T12:44:14ZCERT/CC: VU#166125: Bisheng has authentication bypass vulnerabilitieshttps://threattimes.com/category/tech/jury-awards-qualcomm-just-2-in-damages-against/Threat Timesen2026-10-14T12:36:45ZJury awards Qualcomm just $2 in damages against Arm despite breach verdicthttps://threattimes.com/category/ai/scimplify-raises-25m-to-expand-ai-driven-critical/Threat Timesen2026-10-14T12:36:45ZScimplify raises $25M to expand AI-driven critical materials productionhttps://threattimes.com/category/vulnerabilities/m-a-vinoth-kumar-frontend-dashboard-flaw-cve-2026/Threat Timesen2026-10-14T12:31:40ZCritical Privilege Escalation Flaw Found in Frontend Dashboard Plugin Versions Through 3.0.7https://threattimes.com/category/vulnerabilities/itthinx-affiliates-insecure-deserialization-flaw/Threat Timesen2026-10-14T12:31:40ZCritical Object Injection Flaw Found in itthinx Affiliates Plugin Versions Up to 7.0.1https://threattimes.com/category/vulnerabilities/cve-2026-83910-critical-rpc-runtime-oob-write/Threat Timesen2026-10-14T12:17:01ZCVE-2026-83910: Critical RPC Runtime OOB Write Lets Attackers Execute Code Remotelyhttps://threattimes.com/category/vulnerabilities/microsoft-addresses-windows-dhcp-server-remote/Threat Timesen2026-10-14T12:11:47ZMicrosoft Addresses Windows DHCP Server Remote Code Execution Vulnerabilityhttps://threattimes.com/category/ai/google-launches-gemini-4-argon-with-introductory/Threat Timesen2026-10-14T11:44:41ZGoogle launches Gemini 4 Argon with introductory pricing that doubles in Novemberhttps://threattimes.com/category/cloud-security/apple-researchers-publish-details-on-minions-a/Threat Timesen2026-10-14T11:38:25ZApple Researchers Publish Details on Minions, a Distributed GPU Cloud Using Idle Macshttps://threattimes.com/category/cyber-attacks/doj-arrests-two-us-nationals-in-north-korean/Threat Timesen2026-10-14T11:22:20ZDOJ Arrests Two US Nationals in North Korean Laptop Farm Raidhttps://threattimes.com/category/vulnerabilities/justice-department-announces-coordinated-actions/Threat Timesen2026-10-14T11:03:27ZDOJ Charges 14 in North Korean Remote IT Worker Scheme Affecting 70 US Firmshttps://threattimes.com/category/ai/anthropic-launches-critical-infrastructure/Threat Timesen2026-10-14T11:01:42ZAnthropic launches Critical Infrastructure Defense Program with 11 security partnershttps://threattimes.com/category/vulnerabilities/microsoft-sets-2027-deadline-for-refs-hardening/Threat Timesen2026-10-14T10:47:35ZMicrosoft sets 2027 deadline for ReFS hardening on removable storagehttps://threattimes.com/category/ai/openai-engineer-charged-with-planting-listening/Threat Timesen2026-10-14T10:25:28ZOpenAI engineer charged with planting listening device in executive conference roomhttps://threattimes.com/category/cyber-attacks/huntress-finds-fake-watchguard-site-steals/Threat Timesen2026-10-14T10:07:10ZHuntress Finds Fake WatchGuard Site Steals Credentials Before Serving Real Installerhttps://threattimes.com/category/vulnerabilities/microsoft-patches-windows-smartscreen-privilege/Threat Timesen2026-10-14T09:51:24ZMicrosoft Patches Windows SmartScreen Privilege Escalation Flaw CVE-2026-85851https://threattimes.com/category/vulnerabilities/coruna-and-darksword-exploit-kits-compromise/Threat Timesen2026-10-14T09:35:19ZCoruna and DarkSword exploit kits compromise iPhones via single web visithttps://threattimes.com/category/vulnerabilities/microsoft-outlook-double-free-vulnerability-rated/Threat Timesen2026-10-14T09:35:18ZMicrosoft Outlook Double Free Vulnerability Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/zoom-fixes-high-severity-certificate-flaws-in/Threat Timesen2026-10-14T08:58:22ZZoom Fixes High-Severity Certificate Flaws in Workplace Clientshttps://threattimes.com/category/vulnerabilities/microsoft-windows-search-flaw-cve-2026-105010/Threat Timesen2026-10-14T08:56:24ZMicrosoft Windows Search Flaw CVE-2026-105010 Rated Critical by NVDhttps://threattimes.com/category/vulnerabilities/windows-iscsi-component-suffers-heap-overflow/Threat Timesen2026-10-14T08:56:24ZWindows iSCSI component suffers heap overflow allowing network code execution in CVE-2026-69634https://threattimes.com/category/vulnerabilities/nvd-rates-windows-iscsi-flaw-cve-2026-69705-as/Threat Timesen2026-10-14T08:56:24ZNVD rates Windows iSCSI flaw CVE-2026-69705 as critical 9.8 for unauth RCEhttps://threattimes.com/category/vulnerabilities/ivanti-connect-secure-zero-day-exploited-by/Threat Timesen2026-10-14T08:44:56ZIvanti Connect Secure Zero-Day Exploited by UTA0576 for Root Accesshttps://threattimes.com/category/ai/asml-warns-ai-chip-tool-demand-outpaces-supply/Threat Timesen2026-10-14T08:35:13ZASML warns AI chip tool demand outpaces supply through 2028https://threattimes.com/category/vulnerabilities/critical-severity-information-disclosure-flaw-in/Threat Timesen2026-10-14T08:34:21ZCritical-Severity Information Disclosure Flaw in Copart’s online billing service Tracked as CVE-2026-14851https://threattimes.com/category/vulnerabilities/microsoft-discloses-critical-cve-2026-70096-in/Threat Timesen2026-10-14T07:47:33ZMicrosoft Discloses Critical CVE-2026-70096 in Windows Rich Text Edit Controlhttps://threattimes.com/category/vulnerabilities/wpazleen-simpleform-form-maker-to-chat-apps-with/Threat Timesen2026-10-14T07:47:06ZUnauthenticated Privilege Escalation in WordPress SimpleForm Plugin Allows Admin Account Creationhttps://threattimes.com/category/tech/ahold-delhaize-takes-systems-offline-after-cyber/Threat Timesen2026-10-14T07:41:56ZAhold Delhaize Takes Systems Offline After Cyber Incident Hits US, Europehttps://threattimes.com/category/vulnerabilities/microsoft-patches-three-windows-bitlocker-flaws/Threat Timesen2026-10-14T07:23:10ZMicrosoft patches three Windows BitLocker flaws allowing privilege escalationhttps://threattimes.com/category/tech/google-launches-gemini-4-argon-with-1m-token/Threat Timesen2026-10-14T07:23:10ZGoogle Launches Gemini 4 Argon With 1M Token Output and Low Priceshttps://threattimes.com/category/ai/anthropic-warns-self-replicating-ai-botnets-could/Threat Timesen2026-10-14T07:23:10ZAnthropic warns self-replicating AI botnets could hit IoT devices soonhttps://threattimes.com/category/cyber-attacks/anthropic-ai-submitted-fake-murder-tip-to/Threat Timesen2026-10-14T07:23:10ZAnthropic AI Submitted Fake Murder Tip to Philadelphia Police During Testinghttps://threattimes.com/category/tech/ios-27-2-beta-4-introduces-black-and-white-apple/Threat Timesen2026-10-14T07:10:31ZiOS 27.2 Beta 4 Introduces Black-and-White Apple Music Icon and UI Changeshttps://threattimes.com/category/ai/anthropic-warns-small-ai-models-could-self/Threat Timesen2026-10-14T07:10:31ZAnthropic warns small AI models could self-replicate on IoT devices by late 2026https://threattimes.com/category/tech/openai-engineer-arrested-for-hiding-recording/Threat Timesen2026-10-14T07:10:31ZOpenAI engineer arrested for hiding recording device in SF officehttps://threattimes.com/category/ai/openai-engineer-arrested-for-bugging-executive/Threat Timesen2026-10-14T07:10:31ZOpenAI Engineer Arrested for Bugging Executive Conference Room with Audio Recorderhttps://threattimes.com/category/tech/openai-engineer-arrested-for-allegedly-planting/Threat Timesen2026-10-14T07:10:31ZOpenAI Engineer Arrested for Allegedly Planting Bug in Executive Conference Roomhttps://threattimes.com/category/vulnerabilities/critical-severity-sql-injection-flaw-in-jtl-wms/Threat Timesen2026-10-14T07:00:52ZCritical-Severity Sql Injection Flaw in JTL-WMS Tracked as CVE-2026-89310https://threattimes.com/category/tech/ionq-acquires-elisity-in-1-3-billion-all-stock/Threat Timesen2026-10-14T06:52:55ZIonQ Acquires Elisity in $1.3 Billion All-Stock Cybersecurity Dealhttps://threattimes.com/category/vulnerabilities/microsoft-rates-openssh-for-windows-use-after/Threat Timesen2026-10-14T06:52:55ZMicrosoft Rates OpenSSH for Windows Use-After-Free Flaw as Criticalhttps://threattimes.com/category/vulnerabilities/microsoft-windows-error-reporting-flaw-rated/Threat Timesen2026-10-14T06:52:55ZMicrosoft Windows Error Reporting Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-powershell-critical-flaw-cve-2026-83578/Threat Timesen2026-10-14T06:48:50ZMicrosoft PowerShell Critical Flaw CVE-2026-83578 Allows Remote Code Execution via Integer Underflowhttps://threattimes.com/category/vulnerabilities/microsoft-windows-text-shaping-flaw-rated/Threat Timesen2026-10-14T06:39:14ZMicrosoft Windows Text Shaping Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-rates-windows-text-shaping-heap/Threat Timesen2026-10-14T06:24:58ZMicrosoft Rates Windows Text Shaping Heap Overflow as Critical CVE-2026-83770https://threattimes.com/category/vulnerabilities/microsoft-windows-partition-driver-flaw-rated/Threat Timesen2026-10-14T06:17:18ZMicrosoft Windows Partition Driver Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-windows-dhcp-server-flaw-rated-critical/Threat Timesen2026-10-14T06:17:18ZMicrosoft Windows DHCP Server Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-ole-flaw-cve-2026-96924-rated-critical/Threat Timesen2026-10-14T06:17:18ZMicrosoft OLE Flaw CVE-2026-96924 Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-outlook-heap-overflow-cve-2026-97016/Threat Timesen2026-10-14T06:17:18ZMicrosoft Outlook Heap Overflow CVE-2026-97016 Rated Critical for Remote Code Executionhttps://threattimes.com/category/data-breaches/crunchbase-data-breach-exposes-559-908-accounts/Threat Timesen2026-10-14T06:04:57ZCrunchbase Confirms Data Exfiltration Following ShinyHunters Extortion Attempthttps://threattimes.com/category/vulnerabilities/microsoft-xml-heap-overflow-vulnerability-rated/Threat Timesen2026-10-14T05:55:48ZMicrosoft XML Heap Overflow Vulnerability Rated Critical 9.8 by NVDhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-windows-libarchive/Threat Timesen2026-10-14T05:42:26ZMicrosoft warns of critical Windows libarchive remote code execution flawhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-cve-2026-85792-in/Threat Timesen2026-10-14T05:37:39ZMicrosoft Confirms Critical CVE-2026-85792 in Windows RRAS Servicehttps://threattimes.com/category/vulnerabilities/microsoft-discloses-critical-windows-imaging/Threat Timesen2026-10-14T05:18:59ZMicrosoft Discloses Critical Windows Imaging Component Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-windows-iscsi-flaw-rated-critical-for/Threat Timesen2026-10-14T05:18:59ZMicrosoft Windows iSCSI Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-critical-iis-buffer-overflow-flaw/Threat Timesen2026-10-14T05:18:17ZMicrosoft: Critical IIS Buffer Overflow Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-postscript-printer-driver-flaw-rated/Threat Timesen2026-10-14T04:39:23ZMicrosoft PostScript Printer Driver Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-rce-flaw-found-in-microsoft-postscript/Threat Timesen2026-10-14T04:39:23ZCritical RCE Flaw Found in Microsoft PostScript Printer Driverhttps://threattimes.com/category/vulnerabilities/microsoft-windows-system-info-console-has/Threat Timesen2026-10-14T04:38:28ZMicrosoft Windows System Info Console Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-outlook-critical-rce-flaw-cve-2026/Threat Timesen2026-10-14T04:18:21ZMicrosoft Outlook Critical RCE Flaw CVE-2026-70242 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-exchange-server-flaw-cve-2026-70279/Threat Timesen2026-10-14T04:18:21ZMicrosoft Exchange Server Flaw CVE-2026-70279 Rated Critical for Network Spoofinghttps://threattimes.com/category/vulnerabilities/microsoft-outlook-has-critical-remote-code/Threat Timesen2026-10-14T04:18:21ZMicrosoft Outlook Has Critical Remote Code Execution Flaw CVE-2026-70291https://threattimes.com/category/vulnerabilities/cve-2026-104800-unrestricted-file-upload-flaw-in/Threat Timesen2026-10-14T03:52:21ZWordPress AGE-GATE Plugin Has Critical Unauthenticated Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-unrestricted-file-upload-flaw-4/Threat Timesen2026-10-14T03:52:21ZCritical WordPress Plugin Flaw Allows Unauthenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-word-critical-rce-vulnerability-cve/Threat Timesen2026-10-14T03:41:52ZMicrosoft Word Critical RCE Vulnerability CVE-2026-70300 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-cve-2026-83519-critical-windows-error/Threat Timesen2026-10-14T03:41:52ZMicrosoft CVE-2026-83519: Critical Windows Error Reporting Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-windows-media-foundation-has-critical-2/Threat Timesen2026-10-14T03:41:52ZMicrosoft Windows Media Foundation Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-windows-error-reporting-flaw-allows/Threat Timesen2026-10-14T03:19:39ZCritical Windows Error Reporting Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-remote-code-execution-3/Threat Timesen2026-10-14T03:19:39ZMicrosoft Confirms Critical Remote Code Execution Flaw in Windows Error Reportinghttps://threattimes.com/category/vulnerabilities/oss-security-mailing-list-cve-2026-74580-linux/Threat Timesen2026-10-14T03:11:20ZVghost Flaw in Linux vhost Allows Local Privilege Escalation and VM Escapehttps://threattimes.com/category/tech/google-play-store-adds-personal-library-for-ai/Threat Timesen2026-10-14T03:11:00ZGoogle Play Store adds personal library for AI-generated Android appshttps://threattimes.com/category/vulnerabilities/microsoft-discloses-critical-remote-code/Threat Timesen2026-10-14T03:02:38ZMicrosoft Discloses Critical Remote Code Execution Flaw in Windows CCFFilter Driverhttps://threattimes.com/category/vulnerabilities/microsoft-documents-critical-windows-shell-remote/Threat Timesen2026-10-14T03:02:38ZMicrosoft Documents Critical Windows Shell Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-sql-injection-flaw-in-tyche/Threat Timesen2026-10-14T02:42:07ZAbandoned Cart Pro Plugin Vulnerable to Critical SQL Injection Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-unrestricted-file-upload-flaw-3/Threat Timesen2026-10-14T02:42:07ZSnazzy Social Media Feed CVE-2026-110002: CVSS 9.8 Critical PHP Upload Flaw in v2.5https://threattimes.com/category/vulnerabilities/tyche-softwares-abandoned-cart-pro-for/Threat Timesen2026-10-14T02:42:07ZAbandoned Cart Pro Plugin Flaw Enables Full Account Takeover on WordPress Siteshttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-6/Threat Timesen2026-10-14T02:42:06ZCollabora Online Built-in CODE Server Flaw Exploited in Wildhttps://threattimes.com/category/vulnerabilities/microsoft-cve-2026-83862-windows-nlb-remote-code/Threat Timesen2026-10-14T02:38:52ZMicrosoft CVE-2026-83862: Windows NLB Remote Code Execution Flaw Rated Criticalhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-dns-server-flaw/Threat Timesen2026-10-14T02:38:52ZMicrosoft Confirms Critical DNS Server Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-remote-code-execution-2/Threat Timesen2026-10-14T02:26:11ZMicrosoft Confirms Critical Remote Code Execution Flaw in PPP EAP-TLS Protocolhttps://threattimes.com/category/vulnerabilities/microsoft-nps-remote-code-execution-flaw-rated/Threat Timesen2026-10-14T02:01:05ZMicrosoft NPS Remote Code Execution Flaw Rated Criticalhttps://threattimes.com/category/vulnerabilities/microsoft-windows-media-foundation-has-critical/Threat Timesen2026-10-14T02:00:44ZMicrosoft Windows Media Foundation Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-remote-code-execution-2/Threat Timesen2026-10-14T02:00:44ZMicrosoft warns of critical remote code execution flaw in Windows RRAShttps://threattimes.com/category/vulnerabilities/samsung-open-source-qa-board-os-command-injection/Threat Timesen2026-10-14T01:55:53ZSamsung Open Source QA-Board Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/microsoft-advises-on-critical-windows-schannel/Threat Timesen2026-10-14T01:38:50ZMicrosoft Advises on Critical Windows Schannel Spoofing Vulnerability CVE-2026-85818https://threattimes.com/category/vulnerabilities/microsoft-windows-volume-manager-driver-has/Threat Timesen2026-10-14T01:38:50ZMicrosoft Windows Volume Manager Driver Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-click-to/Threat Timesen2026-10-14T01:31:45ZCritical Shortcode Execution Flaw Found in Click to Chat for WhatsApp Pluginhttps://threattimes.com/category/vulnerabilities/critical-severity-unrestricted-file-upload-flaw-2/Threat Timesen2026-10-14T01:31:45ZPrintcart Store Plugin Vulnerable to Critical Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-rce-flaw-in-windows/Threat Timesen2026-10-14T01:23:25ZMicrosoft Confirms Critical RCE Flaw in Windows Failover Clusterhttps://threattimes.com/category/vulnerabilities/microsoft-outlook-cve-2026-88156-rated-critical/Threat Timesen2026-10-14T01:23:25ZMicrosoft Outlook CVE-2026-88156 Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-remote-code-execution-flaw-found-in/Threat Timesen2026-10-14T01:00:54ZCritical Remote Code Execution Flaw Found in Microsoft Office PowerPointhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-remote-code-execution/Threat Timesen2026-10-14T01:00:38ZMicrosoft warns of critical remote code execution flaw in Windows DNS Serverhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-remote-code-execution/Threat Timesen2026-10-14T00:40:31ZMicrosoft Confirms Critical Remote Code Execution Flaw in Windows Media Playerhttps://threattimes.com/category/vulnerabilities/microsoft-lsass-flaw-cve-2026-96219-rated/Threat Timesen2026-10-14T00:40:31ZMicrosoft LSASS Flaw CVE-2026-96219 Rated Critical by NVD for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-october-patch-tuesday-fixes-1-415-flaws/Threat Timesen2026-10-14T00:37:45ZMicrosoft October Patch Tuesday Fixes 1,415 Flaws Including Exploited Shell Zero-Dayhttps://threattimes.com/category/vulnerabilities/microsoft-windows-dhcp-server-has-critical-remote/Threat Timesen2026-10-14T00:22:21ZMicrosoft Windows DHCP Server Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-double-free-flaw-in/Threat Timesen2026-10-14T00:20:56ZMicrosoft Warns of Critical Double Free Flaw in Failover Cluster Driverhttps://threattimes.com/category/vulnerabilities/microsoft-releases-1-413-patches-for-october-2026/Threat Timesen2026-10-14T00:20:41ZMicrosoft Releases 1,413 Patches for October 2026, Including Three Zero-Day Flawshttps://threattimes.com/category/ai/google-deepmind-releases-gemini-4-argon-for/Threat Timesen2026-10-13T23:48:38ZGoogle DeepMind Releases Gemini 4 Argon for Robotics Controlhttps://threattimes.com/category/ai/openai-engineer-arrested-for-planting-recording/Threat Timesen2026-10-13T22:56:42ZOpenAI engineer arrested for planting recording device in executive conference roomhttps://threattimes.com/category/vulnerabilities/actively-exploited-microsoft-windows-bug-cve-2026/Threat Timesen2026-10-13T22:37:46ZMicrosoft patches exploited Windows Shell zero-day CVE-2026-96951 in October updatehttps://threattimes.com/category/vulnerabilities/google-chrome-releases-extended-stable-update-for/Threat Timesen2026-10-13T21:53:08ZGoogle Deploys Chrome 155 and 152 Updates to Patch Multiple Critical Flawshttps://threattimes.com/category/vulnerabilities/microsoft-ad-fs-has-critical-spoofing-flaw-cve/Threat Timesen2026-10-13T21:23:14ZMicrosoft AD FS Has Critical Spoofing Flaw CVE-2026-96252https://threattimes.com/category/vulnerabilities/legacyupdate-flaw-cve-2026-97381-rated-cvss-9-9/Threat Timesen2026-10-13T21:19:22ZLegacy Update ActiveX Flaw Lets Attackers Install Updates and Restart PCshttps://threattimes.com/category/vulnerabilities/cisco-ucs-and-ucs-based-appliances-uefi-shell/Threat Timesen2026-10-13T21:06:09ZCisco Fixes UEFI Secure Boot Bypass in UCS Servers and Applianceshttps://threattimes.com/category/vulnerabilities/cve-2026-70035-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:56:52ZMicrosoft Patches High-Severity .NET Framework Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes-4/Threat Timesen2026-10-13T20:56:52ZMicrosoft patches high-severity deadlock flaw in ASP.NET Core Kestrelhttps://threattimes.com/category/vulnerabilities/cve-2026-96230-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:53:23ZMicrosoft Patches High-Severity Cross-Site Scripting Flaw in ASP.NET Core Blazor WebAssembly Serverhttps://threattimes.com/category/vulnerabilities/cve-2026-96225-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:53:23ZMicrosoft patches high-severity .NET symlink vulnerability on Linux and macOShttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-6/Threat Timesen2026-10-13T20:53:23ZMicrosoft patches high-severity .NET Framework out-of-bounds write flaw CVE-2026-70007https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-5/Threat Timesen2026-10-13T20:53:23ZMicrosoft .NET WPF Vulnerability CVE-2026-96224 Allows Remote Code Execution via Pixel Shadershttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-aspnetcore-2/Threat Timesen2026-10-13T20:53:23ZMicrosoft Patches High-Severity Privilege Escalation in ASP.NET Core Negotiate Authhttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-4/Threat Timesen2026-10-13T20:53:23ZMicrosoft Issues Patch for High-Severity .NET Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-sql-server-2017-gdr-heap-based-buffer/Threat Timesen2026-10-13T20:51:18ZMicrosoft SQL Server 2017 (GDR) Heap-Based Buffer Overflow Flaw (CVE-2026-94512) Rated CVSS 8.8https://threattimes.com/category/vulnerabilities/cve-2026-65674-insecure-deserialization-flaw-in/Threat Timesen2026-10-13T20:51:18ZCVE-2026-65674: Insecure Deserialization Flaw in Microsoft SQL Server 2019 (GDR) Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-96959-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:50:19ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-96959https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-3/Threat Timesen2026-10-13T20:50:19ZMicrosoft patches high severity out-of-bounds read flaw in .NET Windows Desktop runtimehttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-2/Threat Timesen2026-10-13T20:50:19ZMicrosoft patches high-severity .NET elevation of privilege flaw in Windows Desktop Runtimehttps://threattimes.com/category/vulnerabilities/microsoft-windowsdesktop-app-runtime-win-arm64/Threat Timesen2026-10-13T20:50:19ZMicrosoft Patches High-Severity .NET RCE Vulnerability CVE-2026-83520https://threattimes.com/category/vulnerabilities/cve-2026-70174-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:50:19ZMicrosoft Patches High-Severity .NET Remote Code Execution Flaw CVE-2026-70174https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop/Threat Timesen2026-10-13T20:47:17ZMicrosoft Patches High-Severity .NET WPF Remote Code Execution Flaw CVE-2026-96235https://threattimes.com/category/vulnerabilities/microsoft-netcore-app-runtime-linux-arm-fixes-2/Threat Timesen2026-10-13T20:47:17ZMicrosoft patches high-severity .NET privilege escalation flaw on Linux and macOShttps://threattimes.com/category/vulnerabilities/cve-2026-96222-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:47:17ZMicrosoft patches high-severity AD FS spoofing flaw in .NET crypto libraryhttps://threattimes.com/category/vulnerabilities/saudi-national-arrested-for-installing/Threat Timesen2026-10-13T20:47:17ZOpenAI Engineer Arrested for Planting Audio Bug in Executive Conference Roomhttps://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes-3/Threat Timesen2026-10-13T20:44:05ZMicrosoft Fixes Critical HTTP Request Smuggling Flaw in ASP.NET Corehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-input-validation-flaw-2/Threat Timesen2026-10-13T20:41:02ZAdobe ColdFusion Critical Flaw Allows Remote Code Execution Without User Interactionhttps://threattimes.com/category/vulnerabilities/cve-2026-85886-heap-based-buffer-overflow-flaw-in/Threat Timesen2026-10-13T20:41:02ZCVE-2026-85886: Heap-Based Buffer Overflow Flaw in Microsoft SQL Server 2017 (GDR) Scores 8.5 on CVSShttps://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-5/Threat Timesen2026-10-13T20:41:02ZHigh-Severity Heap-Based Buffer Overflow Flaw in Microsoft SQL Server 2017 (GDR) Tracked as CVE-2026-68883https://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-4/Threat Timesen2026-10-13T20:41:02ZHigh-Severity Heap-Based Buffer Overflow Flaw in Microsoft SQL Server 2017 (GDR) Tracked as CVE-2026-67625https://threattimes.com/category/vulnerabilities/microsoft-sql-server-2017-gdr-stack-based-buffer/Threat Timesen2026-10-13T20:41:02ZMicrosoft SQL Server 2017 (GDR) Stack-Based Buffer Overflow Flaw (CVE-2026-96956) Rated CVSS 8https://threattimes.com/category/vulnerabilities/cve-2026-106624-code-injection-flaw-in-adobe/Threat Timesen2026-10-13T20:41:02ZAdobe ColdFusion 2023 and 2025 face critical zero-click code injection flawhttps://threattimes.com/category/vulnerabilities/critical-severity-server-side-request-forgery-2/Threat Timesen2026-10-13T20:41:02ZAdobe ColdFusion Faces Critical SSRF Flaw Allowing Unauthenticated Privilege Escalationhttps://threattimes.com/category/vulnerabilities/cve-2026-70188-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:41:02ZMicrosoft patches critical HTTP smuggling flaw in ASP.NET Core Kestrelhttps://threattimes.com/category/vulnerabilities/cve-2026-96236-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:37:36ZMicrosoft patches high-severity denial-of-service flaw in ASP.NET Core localizationhttps://threattimes.com/category/vulnerabilities/cve-2026-70197-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:37:36ZMicrosoft Patches .NET Out-of-Bounds Write Flaw in System.Net.Socketshttps://threattimes.com/category/ai/google-rolls-out-gemini-4-argon-with-new-frontier/Threat Timesen2026-10-13T20:36:48ZGoogle Rolls Out Gemini 4 Argon With New Frontier Safety Guardrailshttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-netcore-app/Threat Timesen2026-10-13T20:34:37ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-69651https://threattimes.com/category/vulnerabilities/system-security-cryptography-xml-fixes-high/Threat Timesen2026-10-13T20:27:50ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-96960https://threattimes.com/category/vulnerabilities/cve-2026-96233-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:27:50ZMicrosoft patches high-severity denial-of-service flaw in .NET Core runtimehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-access-control-flaw-in/Threat Timesen2026-10-13T20:23:03ZCritical gRPC Access Control Bypass Found in IBM WebSphere Libertyhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-ibm-websphere/Threat Timesen2026-10-13T20:23:03ZIBM WebSphere Liberty Faces Critical Authentication Bypass in SAML Featurehttps://threattimes.com/category/vulnerabilities/xorbitsai-xoscar-insecure-deserialization-flaw/Threat Timesen2026-10-13T20:23:03ZXorbits Xoscar 0.11.2 Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-path-traversal-flaw-in-adobe/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Critical Path Traversal Flaw Exposes Sensitive Fileshttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-adobe-2/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Faces Critical Code Injection Flaw CVE-2026-106621https://threattimes.com/category/vulnerabilities/adobe-coldfusion-2025-unrestricted-file-upload/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Critical Upload Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in-4/Threat Timesen2026-10-13T20:23:03ZCritical ColdFusion Auth Flaw Allows Arbitrary Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-106620-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T20:23:03ZCritical ColdFusion Auth Bypass Grants Write Access to Low-Privilege Attackershttps://threattimes.com/category/vulnerabilities/cve-2026-75994-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Faces Critical Auth Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-adobe/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Critical Code Injection Flaw Allows Remote Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-96958-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:09:15ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-96958https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-system-security/Threat Timesen2026-10-13T20:05:49ZMicrosoft Patches High-Severity .NET Denial of Service Flaw CVE-2026-84008https://threattimes.com/category/vulnerabilities/microsoft-netcore-app-runtime-linux-arm-fixes/Threat Timesen2026-10-13T20:02:53ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-58280https://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes-2/Threat Timesen2026-10-13T20:02:53ZMicrosoft Patches Race Condition in ASP.NET Core to Fix Privilege Escalationhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-microsoft-native-quic/Threat Timesen2026-10-13T19:59:20ZMicrosoft patches critical QUIC remote code execution flaw in .NET packageshttps://threattimes.com/category/vulnerabilities/microsoft-365-apps-for-enterprise-heap-based-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft 365 Apps for Enterprise Heap-Based Buffer Overflow Flaw (CVE-2026-102849) Rated CVSS 8.8https://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-3/Threat Timesen2026-10-13T19:56:09ZHigh-Severity Heap-Based Buffer Overflow Flaw in Microsoft 365 Apps for Enterprise Tracked as CVE-2026-102850https://threattimes.com/category/vulnerabilities/high-severity-code-injection-flaw-in-microsoft-2/Threat Timesen2026-10-13T19:56:09ZHigh-Severity Code Injection Flaw in Microsoft Visual Studio 2022 version 17.14 Tracked as CVE-2026-103572https://threattimes.com/category/vulnerabilities/microsoft-visual-studio-code-flaw-cve-2026-102235/Threat Timesen2026-10-13T19:56:09ZMicrosoft Visual Studio Code Flaw (CVE-2026-102235) Rated CVSS 8.8https://threattimes.com/category/vulnerabilities/cve-2026-70098-missing-authorization-flaw-in/Threat Timesen2026-10-13T19:56:09ZCVE-2026-70098: Missing Authorization Flaw in Microsoft Visual Studio Code Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-102855-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102855: Heap-Based Buffer Overflow Flaw in Microsoft 365 Apps for Enterprise Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/microsoft-sharepoint-server-subscription-edition-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Server Subscription Edition Missing Authorization Flaw (CVE-2026-102861) Rated CVSS 8.8https://threattimes.com/category/vulnerabilities/cve-2026-102860-improper-access-control-flaw-in/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102860: Improper Access Control Flaw in Microsoft SharePoint Server Subscription Edition Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-102858-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102858: Heap-Based Buffer Overflow Flaw in Microsoft Office 365 for Mac Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-2/Threat Timesen2026-10-13T19:56:09ZHigh-Severity Heap-Based Buffer Overflow Flaw in Microsoft 365 Apps for Enterprise Tracked as CVE-2026-102857https://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in/Threat Timesen2026-10-13T19:56:09ZHigh-Severity Heap-Based Buffer Overflow Flaw in Microsoft 365 Apps for Enterprise Tracked as CVE-2026-102856https://threattimes.com/category/vulnerabilities/microsoft-sharepoint-server-subscription-edition/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Server Subscription Edition Flaw (CVE-2026-102866) Rated CVSS 8.1https://threattimes.com/category/vulnerabilities/cve-2026-102863-code-injection-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102863: Code Injection Flaw in Microsoft SharePoint Server Subscription Edition Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/high-severity-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T19:56:09ZHigh-Severity Incorrect Authorization Flaw in Microsoft SharePoint Server Subscription Edition Tracked as CVE-2026-102862https://threattimes.com/category/vulnerabilities/high-severity-code-injection-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Fixes Code Injection Flaw in ASP.NET Core Debuggerhttps://threattimes.com/category/vulnerabilities/cve-2026-100212-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZCVE-2026-100212: Use-After-Free Flaw in Microsoft 365 Apps for Enterprise Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-100211-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZCVE-2026-100211: Use-After-Free Flaw in Microsoft 365 Apps for Enterprise Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/microsoft-365-apps-for-enterprise-heap-based/Threat Timesen2026-10-13T19:56:09ZMicrosoft 365 Apps for Enterprise Heap-Based Buffer Overflow Flaw (CVE-2026-100210) Rated CVSS 8.8https://threattimes.com/category/vulnerabilities/high-severity-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZHigh-Severity Use-After-Free Flaw in Microsoft 365 Apps for Enterprise Tracked as CVE-2026-100209https://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1607-heap-based/Threat Timesen2026-10-13T19:56:09ZMicrosoft Windows 10 Version 1607 Heap-Based Buffer Overflow Flaw (CVE-2026-100220) Rated CVSS 8.8https://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1607-use-after-free-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft Windows 10 Version 1607 Use-After-Free Flaw (CVE-2026-100218) Rated CVSS 8.1https://threattimes.com/category/vulnerabilities/microsoft-dynamics-nav-2017-insecure/Threat Timesen2026-10-13T19:56:09ZMicrosoft Dynamics NAV 2017 Insecure Deserialization Flaw (CVE-2026-100214) Rated CVSS 8.8https://threattimes.com/category/vulnerabilities/cve-2026-102203-type-confusion-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102203: Type Confusion Flaw in Microsoft Windows 10 Version 1607 Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-102214-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102214: Use-After-Free Flaw in Microsoft Windows 10 Version 1607 Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-102869-type-confusion-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102869: Type Confusion Flaw in Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/microsoft-dynamics-nav-2018-path-traversal-flaw/Threat Timesen2026-10-13T19:56:09ZMicrosoft Dynamics NAV 2018 Path Traversal Flaw (CVE-2026-102226) Rated CVSS 8.8https://threattimes.com/category/vulnerabilities/cve-2026-102225-out-of-bounds-read-flaw-in/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102225: Out-Of-Bounds Read Flaw in Microsoft Windows 10 Version 1607 Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-102217-flaw-in-microsoft-windows-10/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102217: Flaw in Microsoft Windows 10 Version 1607 Scores 8.8 on CVSShttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-aspnetcore/Threat Timesen2026-10-13T19:56:09ZMicrosoft Patches High-Severity SignalR Denial of Service Flaw CVE-2026-70159https://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes/Threat Timesen2026-10-13T19:56:09ZMicrosoft patches high-severity ASP.NET Core privilege escalation flaw CVE-2026-70175https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-aspnetcore-app/Threat Timesen2026-10-13T19:56:09ZMicrosoft patches high-severity ASP.NET Core denial of service flaw CVE-2026-70181https://threattimes.com/category/vulnerabilities/zero-day-initiative-zdi-26-754-0day-genesis-world/Threat Timesen2026-10-13T19:56:09ZZDI Discloses Three Unpatched Genesis World Flaws Including Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-63158-flaw-in-omnispace-agora-project/Threat Timesen2026-10-13T19:54:53ZCVE-2026-63158: Flaw in Omnispace Agora Project Scores 9.1 on CVSShttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-omnispace-agora-project-2/Threat Timesen2026-10-13T19:54:53ZCritical-Severity Flaw in Omnispace Agora Project Tracked as CVE-2026-63159https://threattimes.com/category/vulnerabilities/cve-2026-63160-flaw-in-omnispace-agora-project/Threat Timesen2026-10-13T19:54:53ZCVE-2026-63160: Flaw in Omnispace Agora Project Scores 9.1 on CVSShttps://threattimes.com/category/vulnerabilities/omnispace-agora-project-code-injection-flaw-cve/Threat Timesen2026-10-13T19:43:46ZAgora Project Flaw Allows Unauthenticated Remote Code Execution Before Version 26.10.0https://threattimes.com/category/vulnerabilities/critical-severity-improper-input-validation-flaw/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Faces Critical CVE-2026-106626 Code Execution Riskhttps://threattimes.com/category/vulnerabilities/cve-2026-106629-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Has Critical Stored XSS Flaw CVE-2026-106629https://threattimes.com/category/vulnerabilities/cve-2026-106630-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Faces Critical Stored XSS Flaw CVE-2026-106630https://threattimes.com/category/vulnerabilities/cve-2026-83662-cross-site-scripting-flaw-in-adobe/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Critical XSS Flaw CVE-2026-83662 Requires User Interactionhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-omnispace-agora-project/Threat Timesen2026-10-13T19:43:46ZCritical-Severity Flaw in Omnispace Agora Project Tracked as CVE-2026-63149https://threattimes.com/category/vulnerabilities/cve-2026-103848-os-command-injection-flaw-in/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Faces Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/adobe-experience-manager-6-5-improper-input/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Critical Flaw Allows Code Execution Without User Interactionhttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in-3/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Faces Critical Authorization Flaw Allowing Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-48383-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Faces Critical Authorization Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in-2/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Vulnerability Allows Code Execution Without Interactionhttps://threattimes.com/category/vulnerabilities/critical-severity-xml-external-entity-flaw-in/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager XXE Flaw CVE-2026-90531 Allows Privilege Escalationhttps://threattimes.com/category/vulnerabilities/cve-2026-90532-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Has Critical Authorization Flaw CVE-2026-90532https://threattimes.com/category/vulnerabilities/cve-2026-104252-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T19:38:00ZVitess Fixes Critical Cross-Site Scripting Flaw in Debug Endpointshttps://threattimes.com/category/vulnerabilities/cert-cc-vu-456950-komodo-periphery-agent-contains/Threat Timesen2026-10-13T19:31:07ZCERT/CC: VU#456950: Komodo Periphery Agent Contains an OS Command Injection Vulnerabilityhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-382143-lowcoder-query-library-api/Threat Timesen2026-10-13T19:27:49ZCERT/CC: VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltrationhttps://threattimes.com/category/vulnerabilities/cve-2026-102238-path-traversal-flaw-in-microsoft/Threat Timesen2026-10-13T19:25:53ZVisual Studio Code Path Traversal Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/oss-security-mailing-list-xen-security-advisory/Threat Timesen2026-10-13T19:14:57Zoss-security mailing list: Xen Security Advisory 517 v2 (CVE-2026-79610) - grant-table: double version change racehttps://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1607-use-after-free/Threat Timesen2026-10-13T19:14:57ZMicrosoft Windows Message Queuing Flaw Allows Critical Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-100222-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-13T19:14:57ZMicrosoft NPS Heap Overflow Allows Remote Code Execution on Windowshttps://threattimes.com/category/vulnerabilities/cve-2026-100219-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:14:57ZMicrosoft QUIC Use-After-Free Flaw Rated Critical 9.8 on Windows 11https://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1809-heap-based/Threat Timesen2026-10-13T19:14:57ZWindows Text Shaping Buffer Overflow Allows Remote Code Executionhttps://threattimes.com/category/tech/apple-seeds-fourth-ios-27-2-and-macos-golden-gate/Threat Timesen2026-10-13T18:37:21ZApple Seeds Fourth iOS 27.2 and macOS Golden Gate 27.2 Developer Betashttps://threattimes.com/category/vulnerabilities/cert-cc-vu-573195-go-openssl-apple-libressl-pyca/Threat Timesen2026-10-13T18:34:32ZCERT/CC: VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementationhttps://threattimes.com/category/vulnerabilities/opentext-endpoint-investigator-flaw-cve-2026/Threat Timesen2026-10-13T18:32:15ZOpenText Endpoint Investigator Flaw (CVE-2026-75120) Rated CVSS 9.3https://threattimes.com/category/vulnerabilities/cve-2026-100133-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce and Magento Open Source Hit by Critical Stored XSS Flawhttps://threattimes.com/category/vulnerabilities/adobe-commerce-improper-input-validation-flaw-cve/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce Critical Flaw CVE-2026-92464 Enables Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce, Magento Open Source Hit by Critical Stored XSS Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-92909-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce, Magento Open Source Hit by Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-103849-flaw-in-adobe-commerce-scores-10/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce Critical Vulnerability Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-157374-xss-vulnerability-in-shopware-6/Threat Timesen2026-10-13T18:22:03ZCERT/CC: VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCEhttps://threattimes.com/category/tech/meta-launches-audio-only-ray-ban-glasses-without/Threat Timesen2026-10-13T18:19:33ZMeta Launches Audio-Only Ray-Ban Glasses Without Cameras to Address Privacy Concernshttps://threattimes.com/category/tech/github-deploys-context-aware-model-to-cut-secret/Threat Timesen2026-10-13T18:19:33ZGitHub Deploys Context-Aware Model to Cut Secret Scan Time by 86 Percenthttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-jfrog-cli-tracked-as/Threat Timesen2026-10-13T17:58:28ZCritical-Severity Flaw in jfrog-cli Tracked as CVE-2026-92892https://threattimes.com/category/vulnerabilities/fortiguard-psirt-arbitrary-command-execution-in/Threat Timesen2026-10-13T17:48:30ZFortiGuard PSIRT: arbitrary command execution in fgfmsd daemonhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-sql-command-injection-in-webmail/Threat Timesen2026-10-13T17:48:30ZFortiGuard PSIRT: SQL command injection in webmailhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-persistent-denial-of-service-in/Threat Timesen2026-10-13T17:48:30ZFortinet FortiSandbox Flaw Allows Persistent GUI and CLI Denial of Servicehttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-improper-access-control-and/Threat Timesen2026-10-13T17:48:30ZFortiSandbox GUI Bypass Flaw Rated 9.6 Allows Unauthenticated Accesshttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-html-injection-in-webui/Threat Timesen2026-10-13T17:48:30ZFortinet Fixes HTML Injection Flaw in FortiManager and FortiAnalyzer Web Interfaceshttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-gui-denial-of-service/Threat Timesen2026-10-13T17:48:30ZFortiNet GUI Denial of Service Vulnerability Discovered in FortiOShttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-fabric-api-authentication-bypass/Threat Timesen2026-10-13T17:48:30ZFortiGuard alerts on Fabric API auth bypass in FortiSandbox with CVSS 4.9 scorehttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-double-free-in-signal-handler/Threat Timesen2026-10-13T17:48:30ZFortinet revises advisory for low-severity double free flaw in FortiOS, FortiProxy and FortiSwitchhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-broken-authorization/Threat Timesen2026-10-13T17:48:30ZFortiSIEM GUI Authorization Flaw Allows Unauthorized Code Executionhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-arbitrary-file-write-in-grpc/Threat Timesen2026-10-13T17:48:30ZFortiSIEM path traversal flaw allows unauthenticated code executionhttps://threattimes.com/category/vulnerabilities/fortinet-fortisiem-path-traversal-flaw-cve-2026/Threat Timesen2026-10-13T17:47:18ZFortinet FortiSIEM Path Traversal Flaw (CVE-2026-106173) Rated CVSS 9.4https://threattimes.com/category/tech/tfg-london-cyberattack-disrupts-it-systems-for/Threat Timesen2026-10-13T17:45:30ZTFG London Cyberattack Disrupts IT Systems for Hobbs, Whistles, and Phase Eighthttps://threattimes.com/category/data-breaches/meta-hackers-stole-code-and-data-of-1-500-via/Threat Timesen2026-10-13T17:32:44ZMeta Hackers Stole Code and Data of 1,500 via GitHub Reposhttps://threattimes.com/category/tech/g2a-com-data-shows-antivirus-sales-surge-35-year/Threat Timesen2026-10-13T17:28:08ZG2A.COM Data Shows Antivirus Sales Surge 35% Year-Over-Yearhttps://threattimes.com/category/tech/google-play-adds-private-distribution-for-ai/Threat Timesen2026-10-13T17:28:08ZGoogle Play adds private distribution for AI-generated personal Android appshttps://threattimes.com/category/vulnerabilities/risesoft-y9-digital-infrastructure-path-traversal/Threat Timesen2026-10-13T17:24:17ZRisesoft-y9 Digital-Infrastructure Has High-Severity Unauthenticated Path Traversal Flawhttps://threattimes.com/category/vulnerabilities/docker-hub-critical-flaw-allowed-token-based-user/Threat Timesen2026-10-13T17:11:14ZDocker Hub Critical Flaw Allowed Token-Based User Impersonationhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-podman-container-tools/Threat Timesen2026-10-13T17:02:20ZCritical Podman Flaw Bypasses Security Restrictions via Image Annotationshttps://threattimes.com/category/ai/google-gemini-4-argon-launches-in-app-for-pro-and/Threat Timesen2026-10-13T16:54:48ZGoogle Gemini 4 Argon Launches in App for Pro and Ultra Subscribershttps://threattimes.com/category/ai/google-opens-gemini-4-argon-api-access-for/Threat Timesen2026-10-13T16:40:52ZGoogle Opens Gemini 4 Argon API Access for Developers and Enterprise Usershttps://threattimes.com/category/vulnerabilities/cve-2026-55562-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T16:38:02ZCVE-2026-55562: Cross-Site Scripting Flaw in jhuckaby Cronicle Scores 9 on CVSShttps://threattimes.com/category/vulnerabilities/cve-2026-54454-unrestricted-file-upload-flaw-in/Threat Timesen2026-10-13T16:38:02ZCVE-2026-54454: Unrestricted File Upload Flaw in OpenCATS Scores 9.1 on CVSShttps://threattimes.com/category/vulnerabilities/zarestia-dev-rclone-manager-missing/Threat Timesen2026-10-13T16:38:02ZRClone Manager Fixes Critical Local API Flaw in Version 0.2.7https://threattimes.com/category/vulnerabilities/ivanti-neurons-patch-for-intune-flaw-cve-2026/Threat Timesen2026-10-13T16:38:02ZCritical Flaw in Ivanti Neurons Patch for Intune Exposes Authentication Datahttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T16:38:02ZArgo CD Patched Critical Auth Bypass in PostDelete Hookshttps://threattimes.com/category/ai/google-launches-gemini-4-argon-model-for/Threat Timesen2026-10-13T16:27:30ZGoogle Launches Gemini 4 Argon Model for Developers and Enterpriseshttps://threattimes.com/category/ai/google-rolls-out-gemini-4-argon-to-paying-ai-pro/Threat Timesen2026-10-13T16:27:30ZGoogle Rolls Out Gemini 4 Argon to Paying AI Pro and Ultra Usershttps://threattimes.com/category/vulnerabilities/tanstack-router-cross-site-scripting-flaw-cve/Threat Timesen2026-10-13T16:20:04ZTanStack router Cross-Site Scripting Flaw (CVE-2026-102989) Rated CVSS 9.3https://threattimes.com/category/vulnerabilities/esri-portal-for-arcgis-missing-authentication/Threat Timesen2026-10-13T16:20:04ZCritical Auth Bypass Flaw Found in Esri Portal for ArcGIShttps://threattimes.com/category/vulnerabilities/ivanti-xtraction-flaw-cve-2026-106042-rated-cvss/Threat Timesen2026-10-13T16:20:04ZIvanti Xtraction Critical Flaw Allows Credential Theft Before 2026.4https://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-2/Threat Timesen2026-10-13T16:03:07ZCritical-Severity Code Injection Flaw in fearlessgeekmedia FearlessCMS Tracked as CVE-2026-55695https://threattimes.com/category/vulnerabilities/hackers-use-citrix-netscaler-zero-days-to-install/Threat Timesen2026-10-13T15:59:17ZHackers Use Citrix NetScaler Zero-Days to Install Platypus Backdoorhttps://threattimes.com/category/tech/samsung-android-xr-glasses-leak-reveals-25-styles/Threat Timesen2026-10-13T15:59:17ZSamsung Android XR Glasses Leak Reveals 25 Styles, 9-Hour Battery Lifehttps://threattimes.com/category/vulnerabilities/cve-2026-104935-flaw-in-ivanti-connect-secure/Threat Timesen2026-10-13T15:58:14ZIvanti Connect Secure Zero-Day CVE-2026-104935 Actively Exploitedhttps://threattimes.com/category/tech/apple-launches-homeview-and-seven-smart-home/Threat Timesen2026-10-13T15:58:02ZApple Launches HomeView and Seven Smart Home Devices at Welcome Home Eventhttps://threattimes.com/category/vulnerabilities/cve-2026-103928-flaw-in-metabase-scores-9-3-on/Threat Timesen2026-10-13T15:52:04ZFortinet SQL Injection Flaw Rated High Severity in October 2026 Advisoryhttps://threattimes.com/category/vulnerabilities/saltyorg-docs-code-injection-flaw-cve-2026-55675/Threat Timesen2026-10-13T15:22:32ZSaltStack Docs Repo CVE-2026-55675 Allows Fork-Based Secret Thefthttps://threattimes.com/category/data-breaches/attacker-used-123456-password-to-breach-denmarks/Threat Timesen2026-10-13T15:15:33ZAttacker Used '123456' Password to Breach Denmark's National Registryhttps://threattimes.com/category/tech/apple-brings-siri-ai-to-older-apple-tv-4k-models/Threat Timesen2026-10-13T15:15:33ZApple Brings Siri AI to Older Apple TV 4K Models, Not Just New Gen 4https://threattimes.com/category/tech/apple-homeview-hub-launches-with-siri-ai-and/Threat Timesen2026-10-13T15:15:33ZApple HomeView Hub Launches with Siri AI and Matter Supporthttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-2/Threat Timesen2026-10-13T14:47:22ZIBM MCP Context Forge Patch Fixes Critical Unauthenticated Admin Accesshttps://threattimes.com/category/vulnerabilities/dragonflydb-dragonfly-flaw-cve-2026-104192-rated/Threat Timesen2026-10-13T14:47:22ZDragonfly DB Critical Double-Free Flaw Allows Unauthenticated Code Executionhttps://threattimes.com/category/vulnerabilities/ivanti-october-2026-security-update/Threat Timesen2026-10-13T14:35:37ZIvanti Confirms Wild Exploitation of Connect Secure Vulnerability in October 2026 Updatehttps://threattimes.com/category/vulnerabilities/cve-2026-77099-flaw-in-commvault-cloud-scores-9-3/Threat Timesen2026-10-13T14:30:12ZCVE-2026-77099: Flaw in Commvault Cloud Scores 9.3 on CVSShttps://threattimes.com/category/vulnerabilities/high-severity-path-traversal-flaw-in-wazuh/Threat Timesen2026-10-13T14:21:50ZHigh-Severity Path Traversal Flaw in wazuh-manager Tracked as CVE-2026-74043https://threattimes.com/category/threat-intel/criminal-ip-to-demonstrate-threat-intel-and/Threat Timesen2026-10-13T14:20:12ZCriminal IP to Demonstrate Threat Intel and Exposure Tools at Tokyo Security Dayshttps://threattimes.com/category/cyber-attacks/tenable-ai-and-iran-linked-groups-heighten-risk/Threat Timesen2026-10-13T14:10:45ZTenable: AI and Iran-linked groups heighten risk to critical infrastructurehttps://threattimes.com/category/tech/xandr-fined-9-6-million-for-sharing-grindr-user/Threat Timesen2026-10-13T14:10:45ZXandr fined $9.6 million for sharing Grindr user data without valid consenthttps://threattimes.com/category/vulnerabilities/colorful-igamecenter-flaw-cve-2026-109520-rated/Threat Timesen2026-10-13T14:07:40ZColorful iGameCenter Flaw (CVE-2026-109520) Rated CVSS 9.3https://threattimes.com/category/tech/apple-tv-4k-4th-gen-adds-far-field-microphones/Threat Timesen2026-10-13T14:05:31ZApple TV 4K 4th Gen Adds Far-Field Microphones, Siri AI, and Find My Remotehttps://threattimes.com/category/vulnerabilities/linksys-e1700-os-command-injection-flaw-cve-2026-2/Threat Timesen2026-10-13T13:58:51ZLinksys E1700 Router Has Critical Remote Command Injection Flawhttps://threattimes.com/category/ai/trellix-launches-private-cloud-ai-security/Threat Timesen2026-10-13T13:52:14ZTrellix launches private cloud AI security operations platformhttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authorization-flaw-in/Threat Timesen2026-10-13T13:39:45ZWazuh Critical Flaw Allows Cluster Workers to Overwrite Master Config Fileshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-wazuh-manager-tracked/Threat Timesen2026-10-13T13:39:45ZCritical Wazuh Flaw Lets Authenticated Users Run Root Commands via Config Bypasshttps://threattimes.com/category/tech/carl-pei-iphone-duo-lacks-telephoto-face-id-and/Threat Timesen2026-10-13T13:23:46ZCarl Pei: iPhone Duo lacks telephoto, Face ID and selfie quality for $2k pricehttps://threattimes.com/category/tech/apple-launches-homeview-smart-display-with-siri/Threat Timesen2026-10-13T13:23:13ZApple Launches HomeView Smart Display with Siri AI and Matter Supporthttps://threattimes.com/category/tech/apple-launches-home-collection-with-lg-and/Threat Timesen2026-10-13T13:18:22ZApple Launches Home Collection with LG and Schneider for Smart Home Securityhttps://threattimes.com/category/tech/apple-homepod-mini-2-launches-with-s10-chip-siri/Threat Timesen2026-10-13T13:18:22ZApple HomePod Mini 2 Launches With S10 Chip, Siri AI Delayedhttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authentication-flaw-in-2/Threat Timesen2026-10-13T13:10:43ZNVIDIA AIStore Critical Vulnerability Allows Unauthenticated Token Revocationhttps://threattimes.com/category/vulnerabilities/nvidia-aistore-framework-flaw-cve-2026-65162/Threat Timesen2026-10-13T13:10:43ZNVIDIA AIStore Flaw Allows Remote Code Execution in Kuberneteshttps://threattimes.com/category/tech/nvidia-rtx-spark-laptops-launch-oct-16-with-local/Threat Timesen2026-10-13T12:43:03ZNVIDIA RTX Spark laptops launch Oct. 16 with local AI agent ecosystemhttps://threattimes.com/category/tech/dutch-tax-authority-halts-microsoft-365-cloud/Threat Timesen2026-10-13T12:23:34ZDutch Tax Authority Halts Microsoft 365 Cloud Rollout for Open Source Shifthttps://threattimes.com/category/ai/anthropic-study-warns-small-ai-models-could-soon/Threat Timesen2026-10-13T12:11:48ZAnthropic Study Warns Small AI Models Could Soon Self-Replicate on IoT Deviceshttps://threattimes.com/category/tech/microsoft-launches-decision-1-model-for-automated/Threat Timesen2026-10-13T11:53:22ZMicrosoft Launches Decision-1 Model for Automated AI Classification Taskshttps://threattimes.com/category/cyber-attacks/moonlock-lab-discloses-ghostprofile-macos-malware/Threat Timesen2026-10-13T11:24:08ZMoonlock Lab discloses GhostProfile macOS malware that hides Chrome sessions to evade screen mirroring detectionhttps://threattimes.com/category/vulnerabilities/cve-2026-109157-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-13T10:54:26ZTRENDnet TEW-432BRP Router Has Critical Remote Buffer Overflow Flawhttps://threattimes.com/category/tech/peoples-bank-of-china-approves-visas-application/Threat Timesen2026-10-13T10:42:08ZPeople’s Bank of China Approves Visa’s Application to Prepare for Domestic Clearinghttps://threattimes.com/category/tech/mozilla-launches-self-hosted-firefox-enterprise/Threat Timesen2026-10-13T10:41:48ZMozilla launches self-hosted Firefox Enterprise for European firmshttps://threattimes.com/category/ai/iree-3-12-releases-rewritten-vulkan-driver-and/Threat Timesen2026-10-13T10:25:50ZIREE 3.12 Releases Rewritten Vulkan Driver and Experimental AMD HSA HALhttps://threattimes.com/category/vulnerabilities/bloom-security-finds-1-500-npm-packages/Threat Timesen2026-10-13T10:25:50ZBloom Security Finds 1,500 npm Packages Vulnerable to AI-Driven Supply Chain Attackshttps://threattimes.com/category/malware/kimsuky-deploys-funhouse-ransomware-via-quasar/Threat Timesen2026-10-13T10:25:50ZKimsuky Deploys Funhouse Ransomware via Quasar RAT and Hangul Documentshttps://threattimes.com/category/cyber-attacks/cyber-security-news-ranks-contrast-github/Threat Timesen2026-10-13T10:24:38ZCyber Security News ranks Contrast, GitHub Advanced Security top tools for 2026https://threattimes.com/category/ai/alibaba-launches-qwen-glasses-n1-and-clip-earbuds/Threat Timesen2026-10-13T10:24:38ZAlibaba Launches Qwen Glasses N1 and Clip Earbuds at $450 Starting Pricehttps://threattimes.com/category/tech/isaca-survey-shows-gender-discrimination-in-tech/Threat Timesen2026-10-13T10:12:56ZISACA Survey Shows Gender Discrimination in Tech Rises to 47 Percenthttps://threattimes.com/category/ai/pro-ai-super-pac-network-funnels-millions-to/Threat Timesen2026-10-13T10:12:16ZPro-AI Super PAC Network Funnels Millions to Nevada Shell Companieshttps://threattimes.com/category/tech/spacexsi-introduces-unified-x-subscription/Threat Timesen2026-10-13T10:12:16ZSpaceXSI Introduces Unified X Subscription Bundling Grok, Cursor, and Premiumhttps://threattimes.com/category/ai/meta-releases-zurp-toolkit-to-integrate-ai-agents/Threat Timesen2026-10-13T10:12:16ZMeta Releases Zurp Toolkit to Integrate AI Agents with Burp Suite for Bug Bounty Researchhttps://threattimes.com/category/tech/u-s-healthcare-groups-face-record-cyberattack/Threat Timesen2026-10-13T10:12:16ZU.S. Healthcare Groups Face Record Cyberattack Costs and Patient Care Disruptionhttps://threattimes.com/category/tech/tfg-london-cyberattack-disrupts-hobbs-whistles-it/Threat Timesen2026-10-13T10:05:23ZTFG London cyberattack disrupts Hobbs, Whistles IT systemshttps://threattimes.com/category/ai/uk-government-to-use-frontier-ai-to-find/Threat Timesen2026-10-13T10:05:23ZUK Government to Use Frontier AI to Find Vulnerabilities in Public Systemshttps://threattimes.com/category/vulnerabilities/public-exploit-grants-root-access-and-bootloader/Threat Timesen2026-10-13T10:05:23ZPublic Exploit Grants Root Access and Bootloader Unlock on Amazon Fire TV Cube 3https://threattimes.com/category/ai/chinese-firms-buy-1m-nvidia-gaming-chips-for-ai/Threat Timesen2026-10-13T10:05:23ZChinese firms buy 1M Nvidia gaming chips for AI workloads amid shortagehttps://threattimes.com/category/data-breaches/uk-minister-warns-ai-agents-will-likely-breach/Threat Timesen2026-10-13T10:05:23ZUK minister warns AI agents will likely breach national cyber defenseshttps://threattimes.com/category/ai/pax8-survey-finds-two-thirds-of-smbs-building/Threat Timesen2026-10-13T10:03:58ZPax8 Survey Finds Two-Thirds of SMBs Building Custom AI Toolshttps://threattimes.com/category/tech/amazon-updates-kindle-lineup-with-new-aluminum/Threat Timesen2026-10-13T09:51:15ZAmazon Updates Kindle Lineup With New Aluminum Models and Color Optionshttps://threattimes.com/category/ai/atlassian-ceo-confirms-no-chinese-ai-models-in/Threat Timesen2026-10-13T09:37:07ZAtlassian CEO confirms no Chinese AI models in production systemshttps://threattimes.com/category/ai/naboo-rebrands-to-target-procurement-teams-claims/Threat Timesen2026-10-13T09:37:07ZNaboo rebrands to target procurement teams, claims AI cuts event costshttps://threattimes.com/category/tech/doyensec-chains-sfape-dll-flaws-to-break-windows/Threat Timesen2026-10-13T09:37:06ZDoyensec Chains SFAPE.dll Flaws to Break Windows Isolated User Modehttps://threattimes.com/category/vulnerabilities/cve-2026-44415-flaw-in-siemens-industrial-edge/Threat Timesen2026-10-13T09:35:53ZSiemens Industrial Edge Device Kit Flaw Allows Unauthorized Internal API Accesshttps://threattimes.com/category/vulnerabilities/cve-2026-63350-flaw-in-siemens-simatic-drive/Threat Timesen2026-10-13T09:35:53ZSiemens SIMATIC CPUs face critical web server code execution flawhttps://threattimes.com/category/vulnerabilities/cve-2026-63353-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T09:35:53ZSiemens Drive Controllers Have Critical Cross-Site Scripting Flawhttps://threattimes.com/category/vulnerabilities/siemens-simatic-drive-controller-cpu-1504d-tf/Threat Timesen2026-10-13T09:35:53ZSiemens Drive Controllers Face Critical Cross-Site Scripting Flaw in CSV Importhttps://threattimes.com/category/vulnerabilities/one-in-five-cisos-skip-patch-tuesday-to-avoid/Threat Timesen2026-10-13T09:24:40ZOne-in-five CISOs skip Patch Tuesday to avoid burnout, says Socurahttps://threattimes.com/category/vulnerabilities/github-fixes-npm-trusted-publishing-flaw-exposing/Threat Timesen2026-10-13T09:24:40ZGitHub Fixes npm Trusted Publishing Flaw Exposing 1,500 Packages to Takeoverhttps://threattimes.com/category/ai/character-ai-files-chapter-11-bankruptcy-as/Threat Timesen2026-10-13T09:24:40ZCharacter.ai Files Chapter 11 Bankruptcy as Disney Leads Asset Bidhttps://threattimes.com/category/cyber-attacks/fake-web3-accelerator-distributes-malicious-npm/Threat Timesen2026-10-13T09:24:40ZFake Web3 Accelerator Distributes Malicious npm Packages to Steal Datahttps://threattimes.com/category/cyber-attacks/malwarebytes-labs-warns-that-replying-to-scam/Threat Timesen2026-10-13T09:20:43ZMalwarebytes Labs warns that replying to scam texts validates active numbershttps://threattimes.com/category/cloud-security/microsoft-reshapes-azure-leadership-expands-maia/Threat Timesen2026-10-13T09:09:19ZMicrosoft reshapes Azure leadership, expands Maia chip rolehttps://threattimes.com/category/ai/ai-summaries-now-define-online-reputation-for/Threat Timesen2026-10-13T09:09:19ZAI Summaries Now Define Online Reputation for Billions of Usershttps://threattimes.com/category/tech/cmf-by-nothing-launches-milk-carton-shaped/Threat Timesen2026-10-13T08:52:48ZCMF by Nothing launches milk carton-shaped Speaker S and Speaker Mhttps://threattimes.com/category/cyber-attacks/gta-6-leaker-threatens-full-release-if-crypto/Threat Timesen2026-10-13T08:43:06ZGTA 6 Leaker Threatens Full Release If Crypto Token Hits $30M Market Caphttps://threattimes.com/category/malware/kimsuky-uses-github-infrastructure-for-operation/Threat Timesen2026-10-13T08:43:06ZKimsuky Uses GitHub Infrastructure for Operation GitPower Cyber Spying Campaignhttps://threattimes.com/category/cyber-attacks/european-supermarkets-hit-by-cyberattack/Threat Timesen2026-10-13T08:43:06ZEuropean Supermarkets Hit by Cyberattack Targeting Danfoss Refrigeration Controllershttps://threattimes.com/category/tech/apple-integrates-flexible-graphite-cooling-pipes/Threat Timesen2026-10-13T08:41:53ZApple integrates flexible graphite cooling pipes directly into iPhone Duo hingehttps://threattimes.com/category/ai/ntt-data-nears-deal-to-build-anthropics-first/Threat Timesen2026-10-13T08:32:55ZNTT Data nears deal to build Anthropic’s first Japan data centre in Osakahttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-5/Threat Timesen2026-10-13T08:19:53ZCritical OS Command Injection Flaw Found in Wavlink WL-WN592AX6 Router Firmwarehttps://threattimes.com/category/tech/wow-player-accuses-husband-of-deleting-mythic/Threat Timesen2026-10-13T08:18:40ZWoW player accuses husband of deleting Mythic+ gear in revenge for social outingshttps://threattimes.com/category/tech/dayone-secures-3-67-billion-in-financing-for/Threat Timesen2026-10-13T08:18:12ZDayOne Secures $3.67 Billion in Financing for Malaysia Data Center Expansionhttps://threattimes.com/category/cyber-attacks/us-embassy-in-fiji-links-chinese-hackers-to/Threat Timesen2026-10-13T08:07:31ZUS Embassy in Fiji Links Chinese Hackers to Breach of Regional Organizationhttps://threattimes.com/category/data-breaches/only-24-of-breach-notices-disclose-attack-vectors/Threat Timesen2026-10-13T08:07:31ZOnly 24% of Breach Notices Disclose Attack Vectors in H1 2026, Lowest Rate on Recordhttps://threattimes.com/category/vulnerabilities/wavlink-wl-wn530be1-a-stack-based-buffer-overflow/Threat Timesen2026-10-13T08:02:41ZCritical Remote Overflow in Wavlink Router Firmware Exposes Device to Exploitationhttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-4/Threat Timesen2026-10-13T07:39:29ZCVE-2026-109108: Public Code Enables Remote OS Command Injection in Wavlink WL-WN530BE1-A Firmwarehttps://threattimes.com/category/ai/home-office-asylum-ai-fails-accuracy-checks-in/Threat Timesen2026-10-13T07:36:21ZHome Office asylum AI fails accuracy checks in one of five summarieshttps://threattimes.com/category/ai/kevin-kellys-2016-ai-predictions-reviewed-against/Threat Timesen2026-10-13T07:29:50ZKevin Kelly’s 2016 AI Predictions Reviewed Against Current Industry Realityhttps://threattimes.com/category/ai/intel-details-d270-data-center-gpu-specs-with-480/Threat Timesen2026-10-13T07:29:50ZIntel Details D270 Data Center GPU Specs With 480 GB LPDDR5X Memoryhttps://threattimes.com/category/ai/research-shows-ai-models-can-provably-hide/Threat Timesen2026-10-13T07:29:50ZResearch Shows AI Models Can Provably Hide Arbitrary Capabilitieshttps://threattimes.com/category/tech/airconsole-partners-with-zeekr-for-in-car-gaming/Threat Timesen2026-10-13T07:29:50ZAirConsole Partners With Zeekr for In-Car Gaming Platform Rollouthttps://threattimes.com/category/tech/microsoft-surface-laptop-ultra-launches-with-1/Threat Timesen2026-10-13T07:20:07ZMicrosoft Surface Laptop Ultra launches with $1,000 cashback offer for MacBook ownershttps://threattimes.com/category/tech/october-2026-cybersecurity-hiring-trends-show/Threat Timesen2026-10-13T07:20:07ZOctober 2026 Cybersecurity Hiring Trends Show Demand for Cloud and App Sec Roleshttps://threattimes.com/category/ai/anthropic-warns-small-ai-models-may-self/Threat Timesen2026-10-13T07:20:07ZAnthropic Warns Small AI Models May Self-Replicate on Weak IoT Deviceshttps://threattimes.com/category/vulnerabilities/vmware-launches-hyperarmor-to-manage-ai/Threat Timesen2026-10-13T07:20:07ZVMware launches HyperArmor to manage AI-discovered flaws and enforce MFAhttps://threattimes.com/category/tech/broadcom-launches-vmware-hyperarmor-to-shield/Threat Timesen2026-10-13T07:12:16ZBroadcom Launches VMware HyperArmor to Shield Hypervisors From AI-Driven Attackshttps://threattimes.com/category/tech/cyberattack-spoils-food-at-hundreds-of-french/Threat Timesen2026-10-13T07:09:42ZCyberattack Spoils Food at Hundreds of French Supermarkets via Refrigeration Controllershttps://threattimes.com/category/tech/tii-unveils-falcon-asr-a-1-6b-parameter-arabic/Threat Timesen2026-10-13T07:09:15ZTII Unveils Falcon-ASR, a 1.6B Parameter Arabic Speech Recognition Modelhttps://threattimes.com/category/tech/microsofts-maia-300-chips-offer-40-more-tokens/Threat Timesen2026-10-13T07:09:15ZMicrosoft's Maia 300 chips offer 40% more tokens per megawatt, set to power AI by 2027https://threattimes.com/category/cyber-attacks/bitdefender-finds-firmware-malware-on-mediatek/Threat Timesen2026-10-13T07:09:15ZBitdefender finds firmware malware on MediaTek Android phoneshttps://threattimes.com/category/tech/third-party-app-enables-gboard-rambler-mode-and/Threat Timesen2026-10-13T06:58:43ZThird-party app enables Gboard Rambler mode and Writing Tools on non-Pixel Android deviceshttps://threattimes.com/category/vulnerabilities/researcher-discovers-remote-code-execution-flaw/Threat Timesen2026-10-13T06:58:43ZResearcher Discovers Remote Code Execution Flaw in Google Developer Siteshttps://threattimes.com/category/cyber-attacks/nordvpn-rolls-out-ios-text-screening-and-free/Threat Timesen2026-10-13T06:50:29ZNordVPN rolls out iOS text screening and free HangUp app to halt social engineering scamshttps://threattimes.com/category/tech/uber-abruptly-ends-operations-in-nigeria-and/Threat Timesen2026-10-13T06:46:47ZUber Abruptly Ends Operations in Nigeria and Uganda Following African Retreathttps://threattimes.com/category/cyber-attacks/midnight-mimosa-android-malware-compromises/Threat Timesen2026-10-13T06:46:06ZMidnight Mimosa Android Malware Compromises Firmware of MediaTek Phoneshttps://threattimes.com/category/cloud-security/reddit-user-posts-overview-of-six-common-cloud/Threat Timesen2026-10-13T06:46:05ZReddit User Posts Overview of Six Common Cloud Computing Security Threatshttps://threattimes.com/category/tech/amazon-operates-over-one-million-active-warehouse/Threat Timesen2026-10-13T06:35:18ZAmazon Operates Over One Million Active Warehouse Robots Globallyhttps://threattimes.com/category/ai/christian-leaders-weigh-in-on-ai-ethics-earlier/Threat Timesen2026-10-13T06:32:49ZChristian Leaders Weigh In on AI Ethics Earlier Than With Past Technologieshttps://threattimes.com/category/tech/deepminds-alphaproof-nexus-solves-decades-old/Threat Timesen2026-10-13T06:31:43ZDeepmind’s AlphaProof Nexus Solves Decades-Old Math Problems Via Peer Reviewhttps://threattimes.com/category/tech/ledger-links-93m-hardware-wallet-theft-to/Threat Timesen2026-10-13T06:30:17ZLedger Links $93M Hardware Wallet Theft to Southeast Asia Reseller CryptoBilishttps://threattimes.com/category/ai/linus-torvalds-uses-ai-to-decode-linux-kernel/Threat Timesen2026-10-13T06:30:17ZLinus Torvalds Uses AI to Decode Linux Kernel Patches and Find Bugshttps://threattimes.com/category/tech/reddit-user-runs-large-ai-model-on-35-mining-rig/Threat Timesen2026-10-13T06:30:17ZReddit user runs large AI model on $35 mining rig with 54GB VRAMhttps://threattimes.com/category/tech/samsung-expands-android-17-one-ui-9-rollout-to/Threat Timesen2026-10-13T06:30:17ZSamsung Expands Android 17 One UI 9 Rollout to Galaxy S24 and Fold Series in the UShttps://threattimes.com/category/ai/imf-chief-says-ai-spending-sustains-3-global/Threat Timesen2026-10-13T06:29:23ZIMF Chief Says AI Spending Sustains 3% Global Growth Amid High Energy Costshttps://threattimes.com/category/ai/microsoft-president-calls-for-global-ai-safety/Threat Timesen2026-10-13T06:21:29ZMicrosoft President Calls for Global AI Safety Rules, Citing Lower Standards Than for Milk or Applianceshttps://threattimes.com/category/ai/ai-agents-rebuild-call-of-duty-modern-warfare-2/Threat Timesen2026-10-13T06:21:29ZAI Agents Rebuild Call of Duty: Modern Warfare 2 Source Code Using 500 Billion Tokenshttps://threattimes.com/category/ai/uk-economy-loses-241-billion-annually-to-poor/Threat Timesen2026-10-13T06:12:53ZUK Economy Loses £241 Billion Annually to Poor Workforce Healthhttps://threattimes.com/category/tech/microsoft-releases-decision-1-model-for-ai-agent/Threat Timesen2026-10-13T06:10:21ZMicrosoft Releases Decision-1 Model for AI Agent Workflow Controlhttps://threattimes.com/category/malware/quantum-giant-ionq-targets-cyber-defense-with-1/Threat Timesen2026-10-13T06:09:43ZQuantum giant IonQ targets cyber defense with $1.3B all-stock Elisity acquisitionhttps://threattimes.com/category/tech/microsoft-details-167-kw-power-draw-for-new-maia/Threat Timesen2026-10-13T06:09:43ZMicrosoft details 167 kW power draw for new Maia 300 AI chip rackshttps://threattimes.com/category/tech/ledger-halts-sales-with-cryptobilis-after-finding/Threat Timesen2026-10-13T05:55:25ZLedger Halts Sales With CryptoBilis After Finding Hardware Implants in Stolen Walletshttps://threattimes.com/category/ai/qgis-maintainers-ban-ai-contributions-to-reduce/Threat Timesen2026-10-13T05:55:25ZQGIS Maintainers Ban AI Contributions to Reduce Review Burdenhttps://threattimes.com/category/vulnerabilities/d-link-dcs-930l-flaw-cve-2026-108971-rated-cvss-9/Threat Timesen2026-10-13T05:51:14ZCritical Signature Verification Flaw Found in D-Link DCS-930L Firmware Recoveryhttps://threattimes.com/category/tech/modders-unlock-dlss-5-and-multi-frame-generation/Threat Timesen2026-10-13T05:50:30ZModders Unlock DLSS 5 and Multi-Frame Generation for Older Nvidia GPUshttps://threattimes.com/category/ai/personal-ai-agents-pose-identity-risks-as/Threat Timesen2026-10-13T05:42:43ZPersonal AI Agents Pose Identity Risks as Employees Connect Assistants to Work Systemshttps://threattimes.com/category/cyber-attacks/french-supermarket-chains-suffer-cyber-attack-on/Threat Timesen2026-10-13T05:42:43ZFrench Supermarket Chains Suffer Cyber-Attack on Danfoss Refrigeration Systemshttps://threattimes.com/category/tech/windows-11-23h2-enterprise-editions-lose-security/Threat Timesen2026-10-13T05:42:43ZWindows 11 23H2 Enterprise Editions Lose Security Updates in Novemberhttps://threattimes.com/category/ai/essex-man-uses-chatgpt-to-win-three-year-parking/Threat Timesen2026-10-13T05:42:43ZEssex Man Uses ChatGPT to Win Three-Year Parking Ticket Disputehttps://threattimes.com/category/cyber-attacks/morocco-prioritizes-ai-and-critical/Threat Timesen2026-10-13T05:42:43ZMorocco Prioritizes AI and Critical Infrastructure in New Cybersecurity Strategyhttps://threattimes.com/category/vulnerabilities/industry-veterans-urge-applying-cybersecurity/Threat Timesen2026-10-13T05:42:25ZIndustry veterans urge applying cybersecurity playbook to AI safety challengeshttps://threattimes.com/category/vulnerabilities/ibm-fixes-two-critical-rce-flaws-in-verify-access/Threat Timesen2026-10-13T05:32:23ZIBM Fixes Two Critical RCE Flaws in Verify Access Appliance and Container Deploymentshttps://threattimes.com/category/ai/phasis-world-api-equips-production-agents-with/Threat Timesen2026-10-13T05:32:23ZPhasis World API equips production agents with ontologies and reality layers for precise orientationhttps://threattimes.com/category/ai/google-explores-reusable-styles-for-gemini-ai/Threat Timesen2026-10-13T05:32:23ZGoogle Explores Reusable Styles for Gemini AI Creations and UI Overhaulhttps://threattimes.com/category/data-breaches/attacker-held-21-day-access-to-8-8m-danish/Threat Timesen2026-10-13T05:31:57ZAttacker held 21-day access to 8.8M Danish records via '123456' password at Pays ApShttps://threattimes.com/category/cyber-attacks/researchers-find-idn-flaws-bypassing-chrome/Threat Timesen2026-10-13T05:21:09ZResearchers Find IDN Flaws Bypassing Chrome Phishing Safeguardshttps://threattimes.com/category/ai/broadcom-and-intel-ceos-signal-capital-access-as/Threat Timesen2026-10-13T05:21:09ZBroadcom and Intel CEOs Signal Capital Access as Key AI Constraint in Singaporehttps://threattimes.com/category/ai/convai-founder-alleges-typesafe-copied-jev/Threat Timesen2026-10-13T05:20:37ZConvAI Founder Alleges TypeSafe Copied Jev Architecture Before Market Floodhttps://threattimes.com/category/vulnerabilities/booz-allen-frontier-ai-models-clear-all-eight-ot/Threat Timesen2026-10-13T05:20:37ZBooz Allen Frontier AI Models Clear All Eight OT Attack Objectives in Lab Testhttps://threattimes.com/category/tech/broadcom-ceos-casino-comment-triggers-global-chip/Threat Timesen2026-10-13T05:16:34ZBroadcom CEO's Casino Comment Triggers Global Chip Stock Sell-offhttps://threattimes.com/category/privacy/noyb-prepares-first-collective-redress-case/Threat Timesen2026-10-13T05:16:13Znoyb prepares first collective redress case against CRIF, files second OpenAI complainthttps://threattimes.com/category/ai/french-companies-deploy-agentic-ai-across-space/Threat Timesen2026-10-13T05:15:43ZFrench Companies Deploy Agentic AI Across Space, Banking and Public Sectorshttps://threattimes.com/category/tech/amazon-operates-over-1-million-robots-in/Threat Timesen2026-10-13T05:12:27ZAmazon Operates Over 1 Million Robots in Warehouses Globallyhttps://threattimes.com/category/tech/helixsr-mod-enables-nvidia-dlss-3-7-upscaling-on/Threat Timesen2026-10-13T05:12:27ZHelixSR Mod Enables NVIDIA DLSS 3.7 Upscaling on AMD Handheld Gaming Deviceshttps://threattimes.com/category/ai/harvard-study-finds-ai-coding-agents-boost-code/Threat Timesen2026-10-13T05:04:37ZHarvard study finds AI coding agents boost code volume but fail to increase software outputhttps://threattimes.com/category/ai/character-ai-files-for-chapter-11-bankruptcy/Threat Timesen2026-10-13T05:03:39ZCharacter.AI Files for Chapter 11 Bankruptcy, Agrees to Sell Assets to Disney for $20 Millionhttps://threattimes.com/category/tech/ucla-settles-oracle-erp-dispute-with-3-1m-credits/Threat Timesen2026-10-13T04:57:52ZUCLA settles Oracle ERP dispute with $3.1M credits and $1.31M bill reductionhttps://threattimes.com/category/tech/google-launches-fitbit-edge-tracker-with-display/Threat Timesen2026-10-13T04:57:44ZGoogle Launches Fitbit Edge Tracker With Display, GPS And ECG Sensorshttps://threattimes.com/category/ai/microsoft-unveils-maia-300-ai-chip-for-2027/Threat Timesen2026-10-13T04:57:44ZMicrosoft unveils Maia 300 AI chip for 2027 deploymenthttps://threattimes.com/category/ai/amd-reveals-helion-rack-design-for-agentic-ai/Threat Timesen2026-10-13T04:56:40ZAMD Reveals Helion Rack Design for Agentic AI With 32,768 Zen 6 Coreshttps://threattimes.com/category/tech/microsoft-announces-maia-300-ai-chip-for-2027/Threat Timesen2026-10-13T04:56:40ZMicrosoft Announces Maia 300 AI Chip for 2027 Production Rollouthttps://threattimes.com/category/tech/idc-reports-nvidia-china-ai-chip-shipments-fell/Threat Timesen2026-10-13T04:55:13ZIDC Reports Nvidia China AI Chip Shipments Fell 44% in First Half of 2026https://threattimes.com/category/tech/google-officially-launches-fitbit-edge-tracker/Threat Timesen2026-10-13T04:46:58ZGoogle officially launches Fitbit Edge tracker with larger screen and EKG sensorhttps://threattimes.com/category/tech/cmf-launches-first-portable-bluetooth-speakers/Threat Timesen2026-10-13T04:46:58ZCMF Launches First Portable Bluetooth Speakers With Customizable 3D-Printed Panelshttps://threattimes.com/category/ai/mistlabs-launches-ambi-ai-on-apple-devices/Threat Timesen2026-10-13T04:46:58ZMistlabs Launches Ambi AI on Apple Devices Following $26 Million Funding Roundhttps://threattimes.com/category/cloud-security/sola-security-ai-agent-downgrades-58-5-of-high/Threat Timesen2026-10-13T04:46:57ZSola Security AI Agent Downgrades 58.5% of High-Severity Cloud Findingshttps://threattimes.com/category/ai/microsoft-copilot-faces-quality-complaints-as/Threat Timesen2026-10-13T04:34:47ZMicrosoft Copilot Faces Quality Complaints as Charles Lamanna Profile Emergeshttps://threattimes.com/category/vulnerabilities/attackers-exploit-sonicwall-sma-1000-ssrf-flaw/Threat Timesen2026-10-13T04:24:49ZAttackers Exploit SonicWall SMA 1000 SSRF Flaw Days After Disclosurehttps://threattimes.com/category/tech/virgin-active-executive-outlines-challenges-of/Threat Timesen2026-10-13T04:24:49ZVirgin Active executive outlines challenges of unplanned digital change in IT roleshttps://threattimes.com/category/data-breaches/h-m-group-investigates-claims-of-data-breach-by/Threat Timesen2026-10-13T04:24:49ZH&M Group Investigates Claims of Data Breach by ShinyHuntershttps://threattimes.com/category/ai/intel-to-end-sgx-support-after-xeon-diamond/Threat Timesen2026-10-13T04:22:55ZIntel to end SGX support after Xeon Diamond Rapids, shifts focus to TDXhttps://threattimes.com/category/vulnerabilities/cve-2026-109758-prototype-pollution-flaw-in/Threat Timesen2026-10-13T04:17:35ZPerforce Helix HAS Default Token Flaw Enables Remote Code Executionhttps://threattimes.com/category/tech/techcrunch-disrupt-2026-begins-october-13-at-san/Threat Timesen2026-10-13T04:15:31ZTechCrunch Disrupt 2026 begins October 13 at San Francisco’s Moscone Westhttps://threattimes.com/category/tech/googlebook-testing-reveals-persistent-android/Threat Timesen2026-10-13T04:15:31ZGooglebook testing reveals persistent Android connectivity and pairing failureshttps://threattimes.com/category/malware/varonis-researchers-uncover-avisloader-a-windows/Threat Timesen2026-10-13T04:15:31ZVaronis researchers uncover AvisLoader, a Windows malware using encrypted P2C2https://threattimes.com/category/malware/whatsapp-attachment-deploys-vulcanrat207-a-to/Threat Timesen2026-10-13T04:15:31ZWhatsApp attachment deploys VulcanRAT207.A to gain SYSTEM access on Windowshttps://threattimes.com/category/tech/amazon-cuts-apple-watch-se-3-prices-to-record/Threat Timesen2026-10-13T04:15:02ZAmazon Cuts Apple Watch SE 3 Prices to Record Lows of $199.99https://threattimes.com/category/ai/microsoft-unveils-copilot-driven-interactive/Threat Timesen2026-10-13T04:15:02ZMicrosoft unveils Copilot-driven interactive canvas in Excel for customizable, linked visual reportshttps://threattimes.com/category/ai/openai-sets-450-irish-jobs-target-ahead-of-ai/Threat Timesen2026-10-13T04:15:02ZOpenAI Sets 450 Irish Jobs Target Ahead of AI Summit, Launches New Deployment Unit in Dublinhttps://threattimes.com/category/ai/epic-games-delays-disney-title-to-mandate-ai/Threat Timesen2026-10-13T04:15:02ZEpic Games Delays Disney Title to Mandate AI-First Development Workflowhttps://threattimes.com/category/tech/google-launches-180-fitbit-edge-with-ai-coach-and/Threat Timesen2026-10-13T04:04:50ZGoogle launches $180 Fitbit Edge with AI coach and replaceable batteryhttps://threattimes.com/category/tech/apple-watch-ultra-4-launches-with-satellite-ai/Threat Timesen2026-10-13T04:04:50ZApple Watch Ultra 4 Launches With Satellite, AI Features And Brighter Displayhttps://threattimes.com/category/tech/ultrahuman-partners-with-abu-dhabi-to-validate/Threat Timesen2026-10-13T04:04:50ZUltrahuman partners with Abu Dhabi to validate biological-age modelhttps://threattimes.com/category/tech/engadget-recommends-6gb-ram-and-5-6-inch-screens/Threat Timesen2026-10-13T04:02:53ZEngadget Recommends 6GB RAM and 5.6-Inch Screens for Budget Android Phoneshttps://threattimes.com/category/tech/sucuri-urges-proper-key-management-noting-browser/Threat Timesen2026-10-13T03:53:42ZSucuri urges proper key management, noting browser padlocks only confirm transport securityhttps://threattimes.com/category/cyber-attacks/hackers-force-defrost-mode-in-french-supermarket/Threat Timesen2026-10-13T03:51:12ZHackers Force Defrost Mode in French Supermarket Freezers, Ruining Stockhttps://threattimes.com/category/tech/globalfoundries-to-launch-7nm-class-fdx-fusion/Threat Timesen2026-10-13T03:49:53ZGlobalFoundries to launch 7nm-class FDX Fusion process in Dresden by 2028https://threattimes.com/category/cyber-attacks/researcher-finds-rce-flaw-in-google-devsite-via/Threat Timesen2026-10-13T03:49:53ZResearcher Finds RCE Flaw in Google DevSite via Flask Session Forgeryhttps://threattimes.com/category/tech/cyberattack-disabled-danfoss-refrigeration/Threat Timesen2026-10-13T03:49:29ZCyberattack disabled Danfoss refrigeration systems in French supermarketshttps://threattimes.com/category/tech/george-russell-crashes-mercedes-in-singapore-f1/Threat Timesen2026-10-13T03:46:03ZGeorge Russell crashes Mercedes in Singapore F1 sprint after wet delayhttps://threattimes.com/category/tech/iphone-duo-accessories-compatibility-guide-cases/Threat Timesen2026-10-13T03:40:14ZiPhone Duo accessories compatibility guide: cases, chargers and screen protectorshttps://threattimes.com/category/ai/metas-muse-ai-agent-struggles-with-basic-travel/Threat Timesen2026-10-13T03:40:11ZMeta’s Muse AI Agent Struggles With Basic Travel Booking Taskshttps://threattimes.com/category/cloud-security/developer-releases-native-xbox-cloud-gaming-app/Threat Timesen2026-10-13T03:40:11ZDeveloper Releases Native Xbox Cloud Gaming App for Jailbroken PS5 Consoleshttps://threattimes.com/category/cyber-attacks/ai-fuels-442b-scam-economy-surpassing-global/Threat Timesen2026-10-13T03:31:25ZAI Fuels $442B Scam Economy Surpassing Global Cocaine Trade, Bloomberg Reportshttps://threattimes.com/category/cyber-attacks/analysis-argues-ai-firms-intended-unauthorized/Threat Timesen2026-10-13T03:31:25ZAnalysis argues AI firms intended unauthorized access in recent security breacheshttps://threattimes.com/category/ai/metas-muse-wonder-brings-active-memory-and-focus/Threat Timesen2026-10-13T03:29:22ZMeta's Muse Wonder brings active memory and focus to subscribers and API users, matching frontier AI performancehttps://threattimes.com/category/ai/ntt-data-in-final-talks-to-build-500mw-anthropic/Threat Timesen2026-10-13T03:22:44ZNTT Data in final talks to build 500MW Anthropic data center in Osakahttps://threattimes.com/category/tech/apple-boosts-iphone-duo-supply-orders-by-30/Threat Timesen2026-10-13T03:16:07ZApple boosts iPhone Duo supply orders by 30 percent ahead of pre-ordershttps://threattimes.com/category/tech/cnet-tests-show-iphone-18-pro-max-has-longest/Threat Timesen2026-10-13T03:15:30ZCNET Tests Show iPhone 18 Pro Max Has Longest Battery Life Everhttps://threattimes.com/category/ai/small-businesses-deploy-ai-agents-faster-than/Threat Timesen2026-10-13T03:15:30ZSmall Businesses Deploy AI Agents Faster Than Governance Frameworks Can Keep Pacehttps://threattimes.com/category/ai/hpe-and-nvidia-executives-to-discuss-sovereign-ai/Threat Timesen2026-10-13T03:15:30ZHPE and NVIDIA executives to discuss sovereign AI trade-offs at Washington dinnerhttps://threattimes.com/category/vulnerabilities/bitdefender-researchers-disclose-four-lg-webos/Threat Timesen2026-10-13T03:15:30ZBitdefender researchers disclose four LG webOS flaws enabling root accesshttps://threattimes.com/category/ai/cisco-ships-silicon-one-g300-unveils-g302-chip/Threat Timesen2026-10-13T03:08:04ZCisco ships Silicon One G300, unveils G302 chip for AI data centershttps://threattimes.com/category/tech/xgimi-launches-horizon-30-series-of-4k-120hz/Threat Timesen2026-10-13T03:07:39ZXGIMI Launches Horizon 30 Series of 4K/120Hz Google TV Projectorshttps://threattimes.com/category/ai/nvidia-opens-vera-rubin-rack-designs-to-speed-ai/Threat Timesen2026-10-13T03:07:39ZNvidia opens Vera Rubin rack designs to speed AI factory scalinghttps://threattimes.com/category/tech/neowin-explains-how-to-find-windows-apps-hidden/Threat Timesen2026-10-13T03:07:39ZNeowin explains how to find Windows apps hidden from the Start menuhttps://threattimes.com/category/ai/googlebook-gains-linux-terminal-to-help-users/Threat Timesen2026-10-13T03:07:39ZGooglebook gains Linux terminal to help users build apps with AIhttps://threattimes.com/category/ai/meta-ceo-discusses-100b-ai-risk-and/Threat Timesen2026-10-13T02:59:03ZMeta CEO Discusses $100B AI Risk and Infrastructure Scale in New Interviewhttps://threattimes.com/category/cyber-attacks/the-gentlemen-claims-moneygram-breach-but-no-data/Threat Timesen2026-10-13T02:57:01ZThe Gentlemen Claims MoneyGram Breach, But No Data Samples Published Yethttps://threattimes.com/category/tech/us-pc-maker-warns-retail-gpu-prices-to-climb/Threat Timesen2026-10-13T02:56:39ZUS PC Maker Warns Retail GPU Prices to Climb Significantly Amid Supply Constraintshttps://threattimes.com/category/data-breaches/luna-moth-leaks-reveal-social-engineering-scripts/Threat Timesen2026-10-13T02:56:39ZLuna Moth leaks reveal social engineering scripts and team tacticshttps://threattimes.com/category/malware/atlassian-data-center-flaw-exploited-two-hours/Threat Timesen2026-10-13T02:56:39ZAtlassian Data Center Flaw Exploited Two Hours After Disclosurehttps://threattimes.com/category/tech/google-adds-android-enterprise-controls-to/Threat Timesen2026-10-13T02:56:06ZGoogle adds Android Enterprise controls to restrict AI automation for IT adminshttps://threattimes.com/category/ai/microsoft-to-deploy-azure-maia-ai-chips-at/Threat Timesen2026-10-13T02:44:13ZMicrosoft to Deploy Azure Maia AI Chips at Gigawatt Scale by 2027https://threattimes.com/category/ai/blueprints-ai-to-debut-permit-ready-blueprint/Threat Timesen2026-10-13T02:44:13ZBlueprints AI to debut permit-ready blueprint generator at TechCrunch Disrupthttps://threattimes.com/category/ai/microsoft-president-brad-smith-urges-uk-to-lead/Threat Timesen2026-10-13T02:44:13ZMicrosoft President Brad Smith Urges UK to Lead Global AI Regulationhttps://threattimes.com/category/tech/apple-opens-iphone-duo-preorder-prep-ahead-of/Threat Timesen2026-10-13T02:34:11ZApple Opens iPhone Duo Preorder Prep Ahead of Friday Launchhttps://threattimes.com/category/tech/shyglass-mac-app-uses-airpods-head-tracking-to/Threat Timesen2026-10-13T02:34:11ZShyGlass Mac App Uses AirPods Head Tracking to Blur Screen on Look Awayhttps://threattimes.com/category/threat-intel/cloudflare-data-shows-yandex-bot-drop-not-russian/Threat Timesen2026-10-13T02:34:10ZCloudflare Data Shows Yandex Bot Drop, Not Russian Disinformationhttps://threattimes.com/category/tech/google-location-accuracy-service-improves-android/Threat Timesen2026-10-13T02:34:10ZGoogle Location Accuracy Service Improves Android Positioning via Crowdsourced Datahttps://threattimes.com/category/tech/asus-googlebook-14-review-hands-on-with-googles/Threat Timesen2026-10-13T02:34:10ZASUS Googlebook 14 review: Hands-on with Google's new premium Android laptophttps://threattimes.com/category/tech/survey-68-of-it-pros-name-human-error-as-top/Threat Timesen2026-10-13T02:23:51ZSurvey: 68% of IT Pros Name Human Error as Top Cyber Threathttps://threattimes.com/category/ai/honeyjar-launches-ai-platform-to-automate/Threat Timesen2026-10-13T02:18:44ZHoneyjar Launches AI Platform to Automate Strategic Communications Workflowshttps://threattimes.com/category/tech/whatsapp-tests-scheduled-messages-in-android-beta/Threat Timesen2026-10-13T02:18:44ZWhatsApp tests scheduled messages in Android beta, raising European compliance concernshttps://threattimes.com/category/ai/amd-reveals-helion-rack-design-for-ai-agents-at/Threat Timesen2026-10-13T02:18:44ZAMD reveals Helion rack design for AI agents at OCP Summit 2026https://threattimes.com/category/vulnerabilities/attackers-target-maximum-severity-ssrf-flaw-in/Threat Timesen2026-10-13T02:18:44ZAttackers Target Maximum-Severity SSRF Flaw in SonicWall SMA 1000 Applianceshttps://threattimes.com/category/tech/tiny11-builder-gets-ui-overhaul-to-streamline/Threat Timesen2026-10-13T02:12:34ZTiny11 Builder Gets UI Overhaul to Streamline Custom Windows 11 26H2 ISO Buildshttps://threattimes.com/category/tech/ukraine-claims-yandex-strikes-silenced-russian/Threat Timesen2026-10-13T02:09:38ZUkraine claims Yandex strikes silenced Russian social media botshttps://threattimes.com/category/tech/googlebook-os-review-highlights-potential-for/Threat Timesen2026-10-13T02:02:49ZGooglebook OS Review Highlights Potential for Android on Desktophttps://threattimes.com/category/tech/solo-developer-ports-hideo-kojimas-p-t-to-pc/Threat Timesen2026-10-13T02:02:49ZSolo developer ports Hideo Kojima’s P.T. to PC using original PS4 assetshttps://threattimes.com/category/cyber-attacks/french-supermarket-freezers-hijacked-in/Threat Timesen2026-10-13T02:01:03ZFrench Supermarket Freezers Hijacked in Cyberattack on Danfoss Systemshttps://threattimes.com/category/ai/microsoft-researchers-reveal-ai-agents-get/Threat Timesen2026-10-13T01:59:37ZMicrosoft researchers reveal AI agents get trapped in idea basinshttps://threattimes.com/category/ai/google-gemini-spark-automates-tasks-but-warns/Threat Timesen2026-10-13T01:58:43ZGoogle Gemini Spark automates tasks but warns users to monitor AI actionshttps://threattimes.com/category/ai/anthropic-researchers-say-small-ai-models-may/Threat Timesen2026-10-13T01:50:17ZAnthropic researchers say small AI models may self-replicate on IoT devices soonhttps://threattimes.com/category/tech/musks-grok-lego-order-screenshot-exposed-payment/Threat Timesen2026-10-13T01:34:31ZMusk’s Grok Lego Order Screenshot Exposed Payment Details, Prompting Users to Manipulate Purchasehttps://threattimes.com/category/tech/applied-materials-opens-5b-silicon-valley/Threat Timesen2026-10-13T01:29:38ZApplied Materials opens $5B Silicon Valley facility for chip R&Dhttps://threattimes.com/category/ai/sakana-ais-self-improving-model-risks-reinforcing/Threat Timesen2026-10-13T00:58:30ZSakana AI’s Self-Improving Model Risks Reinforcing Errors in New Studyhttps://threattimes.com/category/ai/dell-expands-ai-partner-ecosystem-to-silicon/Threat Timesen2026-10-13T00:58:11ZDell expands AI partner ecosystem to Silicon Valley buildershttps://threattimes.com/category/tech/apple-opens-iphone-duo-preorder-configurator/Threat Timesen2026-10-13T00:57:38ZApple Opens iPhone Duo Preorder Configurator Ahead of Friday Launchhttps://threattimes.com/category/vulnerabilities/sap-se-sap-manufacturing-integration-and/Threat Timesen2026-10-13T00:56:22ZSAP MII Flaw Allows Admins to Escalate Privileges on Java Serverhttps://threattimes.com/category/vulnerabilities/sap-se-sap-s-4hana-manage-substitution-validation/Threat Timesen2026-10-13T00:56:22ZSAP S/4HANA Rule Processing Flaw Allows Arbitrary ABAP Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-sap-se-sap-netweaver/Threat Timesen2026-10-13T00:56:22ZSAP NetWeaver Visual Composer Flaw Allows Low-Privilege Attackers to Compromise Remote Systemshttps://threattimes.com/category/vulnerabilities/cve-2026-89111-server-side-request-forgery-flaw/Threat Timesen2026-10-13T00:56:22ZCritical OAuth2 SSRF in SAP Cloud SDK for Python Exposes Client Credentialshttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authentication-flaw-in/Threat Timesen2026-10-13T00:56:22ZMetasploit Framework Web Service Has Unauthenticated Credential Access Flawhttps://threattimes.com/category/ai/openai-codex-cli-0-157-0-installs-persistent-self/Threat Timesen2026-10-13T00:42:24ZOpenAI Codex CLI 0.157.0 Installs Persistent Self-Updating Daemon by Defaulthttps://threattimes.com/category/tech/cyber-group-byod-leaks-data-from-3-615-trump/Threat Timesen2026-10-13T00:42:02ZCyber Group BYOD Leaks Data From 3,615 Trump Mobile Customershttps://threattimes.com/category/tech/who-cant-assess-plague-risk-as-russia-fails-to/Threat Timesen2026-10-13T00:31:02ZWHO: Can't assess plague risk as Russia fails to confirm cause of researcher's deathhttps://threattimes.com/category/ai/intel-and-broadcom-ceos-warn-ai-sector-faces/Threat Timesen2026-10-13T00:31:02ZIntel and Broadcom CEOs warn AI sector faces capital access hurdleshttps://threattimes.com/category/ai/chinese-mathematicians-launch-alliance-to-develop/Threat Timesen2026-10-13T00:31:02ZChinese Mathematicians Launch Alliance to Develop Specialized AI Models for Researchhttps://threattimes.com/category/cyber-attacks/anthropic-blocks-web-for-ai-tests-after-models/Threat Timesen2026-10-13T00:17:41ZAnthropic Blocks Web For AI Tests After Models Submitted Forms To US Agencieshttps://threattimes.com/category/vulnerabilities/anydesk-linux-patch-fixes-remote-root-code/Threat Timesen2026-10-13T00:10:07ZAnyDesk Linux Patch Fixes Remote Root Code Execution Flawhttps://threattimes.com/category/tech/openclaw-operates-as-autonomous-agent-on-vps/Threat Timesen2026-10-13T00:07:50ZOpenClaw Operates as Autonomous Agent on VPS Infrastructurehttps://threattimes.com/category/ai/smarsh-edge-2026-highlights-gap-between-ai/Threat Timesen2026-10-13T00:07:50ZSmarsh EDGE 2026 Highlights Gap Between AI Adoption and Compliance Controlshttps://threattimes.com/category/ai/healthcare-ai-scribe-suki-raises-90-million/Threat Timesen2026-10-13T00:07:50ZHealthcare AI scribe Suki raises $90 million Series E to expand agentic workflowshttps://threattimes.com/category/ai/rich-hickeys-ai-as-automation-argument-faces/Threat Timesen2026-10-12T23:57:04ZRich Hickey’s AI-as-Automation Argument Faces Pushback on Hacker Newshttps://threattimes.com/category/tech/tweaks-and-supersampling-can-boost-older-gpu/Threat Timesen2026-10-12T23:57:04ZTweaks and supersampling can boost older GPU performance without hardware upgradeshttps://threattimes.com/category/data-breaches/318-185-sharecare-accounts-exposed-in-data-breach/Threat Timesen2026-10-12T23:38:22ZShinyHunters Leaks 318k Sharecare Records, Exposing Brazilian IDs After Failed Extortionhttps://threattimes.com/category/tech/microsoft-nadella-claims-windows-pc-is-infinite/Threat Timesen2026-10-12T23:38:11ZMicrosoft Nadella claims Windows PC is infinite software factory via Copilot Codehttps://threattimes.com/category/vulnerabilities/ibm-datastage-on-cloud-pak-for-data-has-critical-2/Threat Timesen2026-10-12T23:38:11ZIBM DataStage on Cloud Pak for Data Has Critical Path Traversal Flawhttps://threattimes.com/category/vulnerabilities/ibm-datastage-on-cloud-pak-for-data-suffers/Threat Timesen2026-10-12T23:38:11ZIBM DataStage on Cloud Pak for Data suffers critical remote code execution flawhttps://threattimes.com/category/vulnerabilities/ibm-datastage-on-cloud-pak-for-data-has-critical/Threat Timesen2026-10-12T23:38:11ZIBM DataStage on Cloud Pak for Data Has Critical Remote Info Leakhttps://threattimes.com/category/vulnerabilities/ibm-i-code-injection-flaw-cve-2026-96119-rated/Threat Timesen2026-10-12T23:35:50ZIBM i HTTP Server Admin Flaw Rated Critical, Allows Remote Code Executionhttps://threattimes.com/category/cyber-attacks/prominent-ransomware-negotiator-edward-dubrovsky/Threat Timesen2026-10-12T23:26:22ZProminent Ransomware Negotiator Edward Dubrovsky Faces Extortion Chargeshttps://threattimes.com/category/ai/dell-ai-symposium-highlights-runtime-governance/Threat Timesen2026-10-12T23:26:22ZDell AI Symposium highlights runtime governance challenges for autonomous agentshttps://threattimes.com/category/ai/metas-muse-ai-agent-generates-explicit-sexual/Threat Timesen2026-10-12T23:25:59ZMeta’s Muse AI Agent Generates Explicit Sexual Content in Testshttps://threattimes.com/category/tech/norway-fines-microsoft-owned-xandr-9-6m-for/Threat Timesen2026-10-12T23:24:55ZNorway fines Microsoft-owned Xandr $9.6M for unlawful Grindr data sharinghttps://threattimes.com/category/ai/meta-develops-wonder-ai-models-to-enhance-muse/Threat Timesen2026-10-12T23:15:04ZMeta Develops Wonder AI Models to Enhance Muse Assistant Capabilitieshttps://threattimes.com/category/ai/meta-launches-muse-wonder-ai-models-to-compete/Threat Timesen2026-10-12T23:14:57ZMeta Launches Muse Wonder AI Models to Compete With Industry Leadershttps://threattimes.com/category/ai/kioxia-unveils-pcie-6-0-ssd-exceeding-20-million/Threat Timesen2026-10-12T23:05:37ZKioxia Unveils PCIe 6.0 SSD Exceeding 20 Million Random-Read IOPShttps://threattimes.com/category/tech/alibaba-qwen-unveils-qwengyre-framework-for-long/Threat Timesen2026-10-12T22:58:11ZAlibaba Qwen Unveils QwenGyre Framework for Long-Horizon Agent Traininghttps://threattimes.com/category/ai/meta-releases-muse-wonder-ai-models-for-complex/Threat Timesen2026-10-12T22:56:57ZMeta releases Muse Wonder AI models for complex agent taskshttps://threattimes.com/category/vulnerabilities/flock-security-gains-cve-numbering-authority-for/Threat Timesen2026-10-12T22:39:54ZFlock Security Gains CVE Numbering Authority for Surveillance Productshttps://threattimes.com/category/tech/jp-morgan-raises-apple-price-target-to-360/Threat Timesen2026-10-12T22:39:54ZJP Morgan raises Apple price target to $360 despite iPhone production reportshttps://threattimes.com/category/vulnerabilities/thorsten-phpmyfaq-sql-injection-flaw-cve-2026/Threat Timesen2026-10-12T22:39:45ZphpMyFAQ SQL Injection Flaw Rated Critical in National Vulnerability Database Recordhttps://threattimes.com/category/tech/ionq-to-acquire-cybersecurity-firm-elisity-in-1-3/Threat Timesen2026-10-12T22:28:10ZIonQ to Acquire Cybersecurity Firm Elisity in $1.3 Billion Stock Dealhttps://threattimes.com/category/tech/apple-launches-campaign-urging-users-to-switch/Threat Timesen2026-10-12T22:09:59ZApple launches campaign urging users to switch from Chrome to Safarihttps://threattimes.com/category/tech/android-october-2026-system-update-adds-webview/Threat Timesen2026-10-12T22:09:59ZAndroid October 2026 System Update Adds WebView API, Wallet Featureshttps://threattimes.com/category/tech/pennsylvania-measles-outbreak-claims-sixth-life/Threat Timesen2026-10-12T22:09:57ZPennsylvania measles outbreak claims sixth life as case count surpasses 1,100https://threattimes.com/category/tech/engadget-explains-causes-of-blurry-iphone-photos/Threat Timesen2026-10-12T22:09:41ZEngadget Explains Causes of Blurry iPhone Photos and Settings Fixeshttps://threattimes.com/category/cyber-attacks/aws-guardduty-extended-threat-detection-adds-five/Threat Timesen2026-10-12T22:09:41ZAWS GuardDuty Extended Threat Detection Adds Five New Indicators for Attack Sequenceshttps://threattimes.com/category/vulnerabilities/qexo-flaw-cve-2026-44828-rated-cvss-9-3/Threat Timesen2026-10-12T22:05:31ZQexo vulnerability allows unauthenticated users to reset blog configuration and expose credentialshttps://threattimes.com/category/tech/hackers-override-french-supermarket-freezers/Threat Timesen2026-10-12T22:01:13ZHackers Override French Supermarket Freezers, Causing Food Spoilage and Fireshttps://threattimes.com/category/tech/apple-m6-macbook-pro-to-launch-with-dual-neural/Threat Timesen2026-10-12T22:01:13ZApple M6 MacBook Pro to Launch With Dual Neural Engine and 12-Core CPUhttps://threattimes.com/category/malware/canadian-ransomware-negotiator-edward-dubrovsky/Threat Timesen2026-10-12T22:01:13ZCanadian Ransomware Negotiator Edward Dubrovsky Arrested in ShinyHunters Probehttps://threattimes.com/category/tech/hackers-spoil-food-at-french-supermarkets-by/Threat Timesen2026-10-12T22:01:13ZHackers Spoil Food at French Supermarkets by Overheating Danfoss Fridgeshttps://threattimes.com/category/vulnerabilities/cve-2026-90920-code-injection-flaw-in-ibm-maximo/Threat Timesen2026-10-12T21:48:58ZIBM Maximo AI Service 9.1 and 9.2 Face Critical Remote Code Execution Riskhttps://threattimes.com/category/ai/epic-games-shifts-to-ai-first-strategy-delaying/Threat Timesen2026-10-12T21:43:44ZEpic Games shifts to AI-first strategy, delaying Disney shooter indefinitelyhttps://threattimes.com/category/ai/dell-and-intel-address-enterprise-ai-budget/Threat Timesen2026-10-12T21:41:59ZDell and Intel address enterprise AI budget constraints and CPU shiftshttps://threattimes.com/category/ai/epic-games-delays-disney-shooter-shifts-to-ai/Threat Timesen2026-10-12T21:31:42ZEpic Games Delays Disney Shooter, Shifts to AI-First Development Strategyhttps://threattimes.com/category/ai/meta-unveils-liquid-cooled-icepack-rack-and-102/Threat Timesen2026-10-12T21:31:40ZMeta Unveils Liquid-Cooled IcePack Rack and 102.4T Switches at OCP Summit 2026https://threattimes.com/category/ai/intel-names-crescent-island-ai-accelerator-the/Threat Timesen2026-10-12T21:31:40ZIntel names Crescent Island AI accelerator the GPU D-Series with 1.3 PFLOPS FP8https://threattimes.com/category/vulnerabilities/cve-2020-37279-os-command-injection-flaw-in/Threat Timesen2026-10-12T21:03:09Zeasy-pdf-merge 0.2.6 and Earlier Suffer Critical Command Injection Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-3/Threat Timesen2026-10-12T21:03:09ZCritical OS Command Injection Found in GPT-SoVITS Voice Cloning Toolhttps://threattimes.com/category/vulnerabilities/critical-severity-hard-coded-credentials-flaw-in/Threat Timesen2026-10-12T21:03:09ZRapyd Admin 9.20.0 Fixes Critical Hardcoded Credential Flaw Exposing Super-Admin Accesshttps://threattimes.com/category/vulnerabilities/th0rgal-sandboxed-sh-flaw-cve-2026-109569-rated/Threat Timesen2026-10-12T21:03:09ZCritical Container Escape Flaw Found in sandboxed.sh Versions Up to 1.3.0https://threattimes.com/category/tech/apples-q3-2026-smartphone-share-hits-record-22/Threat Timesen2026-10-12T21:01:11ZApple’s Q3 2026 Smartphone Share Hits Record 22% Amid Global Market Declinehttps://threattimes.com/category/vulnerabilities/cve-2026-53997-flaw-in-netherman-portal-del/Threat Timesen2026-10-12T20:51:57ZNetherman Portal del Hermano Flaw Allows Unauthenticated Account Takeovershttps://threattimes.com/category/cyber-attacks/aws-publishes-guide-for-ml-dsa-quantum-resistant/Threat Timesen2026-10-12T20:49:01ZAWS publishes guide for ML-DSA quantum-resistant signing in software supply chainshttps://threattimes.com/category/tech/microsoft-unveils-maia-300-ai-accelerator-to/Threat Timesen2026-10-12T20:49:01ZMicrosoft unveils Maia 300 AI accelerator to challenge NVIDIA at gigawatt scalehttps://threattimes.com/category/vulnerabilities/critical-severity-injection-flaw-in-netcore-nr268/Threat Timesen2026-10-12T20:40:38ZNetcore NR268 Router Has Critical Remote Argument Injection Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-netease-cloud-music-for/Threat Timesen2026-10-12T19:49:17ZNetEase Cloud Music Windows Client Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-109423-flaw-in-netease-cloud-music-for/Threat Timesen2026-10-12T19:49:17ZNetEase Cloud Music Windows Client Has Critical TLS Validation Flawhttps://threattimes.com/category/vulnerabilities/haproxy-data-plane-api-ee-missing-authentication/Threat Timesen2026-10-12T19:49:17ZHAProxy Data Plane API Critical Auth Bypass CVE-2026-109575 Fixedhttps://threattimes.com/category/vulnerabilities/ibm-db2-mirror-for-i-flaw-cve-2026-96012-rated/Threat Timesen2026-10-12T19:37:39ZIBM Db2 Mirror for i Faces Critical Privilege Escalation Flawhttps://threattimes.com/category/ai/openai-releases-solutions-to-372-math-problems/Threat Timesen2026-10-12T19:32:36ZOpenAI Releases Solutions to 372 Math Problems, Sparking Backlashhttps://threattimes.com/category/ai/deepgram-targets-air-gapped-laptops-for-native/Threat Timesen2026-10-12T19:32:36ZDeepgram targets air-gapped laptops for native voice AI model executionhttps://threattimes.com/category/cloud-security/yandex-shuts-down-data-centers-after-drone/Threat Timesen2026-10-12T19:32:36ZYandex shuts down data centers after drone attacks disrupt cloud serviceshttps://threattimes.com/category/vulnerabilities/privasys-ra-tls-clients-flaw-cve-2026-108362/Threat Timesen2026-10-12T19:21:11ZPrivasys ra-tls-clients Fixes Critical TLS Attestation Bypass in Version 0.11.0https://threattimes.com/category/ai/palantir-cto-claims-ai-researchers-smoke-to/Threat Timesen2026-10-12T19:20:02ZPalantir CTO Claims AI Researchers Smoke to Signal Belief in Technologyhttps://threattimes.com/category/tech/apple-expands-icloud-with-homekit-video-upgrades/Threat Timesen2026-10-12T19:20:02ZApple expands iCloud+ with HomeKit video upgrades, custom email limits and AI allowanceshttps://threattimes.com/category/tech/neowin-explains-how-to-identify-hidden-third/Threat Timesen2026-10-12T19:20:02ZNeowin Explains How to Identify Hidden Third-Party Services on Windows PCshttps://threattimes.com/category/ai/google-gemini-may-soon-offer-shop-this-feature/Threat Timesen2026-10-12T19:04:33ZGoogle Gemini May Soon Offer ‘Shop This’ Feature via Floating Overlayhttps://threattimes.com/category/cloud-security/microsoft-entra-identity-security-updates-signal/Threat Timesen2026-10-12T19:04:33ZMicrosoft Entra Identity Security Updates Signal Major Challenges for IT Adminshttps://threattimes.com/category/tech/ithaca-holdings-in-advanced-talks-to-take-bumble/Threat Timesen2026-10-12T19:04:26ZIthaca Holdings in Advanced Talks to Take Bumble Private at $1 Billion Valuationhttps://threattimes.com/category/vulnerabilities/cve-2026-87744-flaw-in-red-hat-exploit/Threat Timesen2026-10-12T18:58:44ZQuarkus REST Data Panache Flaw Drops Security Roles for Unauthenticated Accesshttps://threattimes.com/category/vulnerabilities/cve-2026-57118-missing-authentication-flaw-in/Threat Timesen2026-10-12T18:58:44ZPraisonAI Fixes Critical Auth Bypass in Agent Teams Before 1.6.59https://threattimes.com/category/cloud-security/dark-reading-report-calls-for-identity-security/Threat Timesen2026-10-12T18:52:23ZDark Reading Report Calls for Identity Security Rethink Amid Cloud Identity Growthhttps://threattimes.com/category/ai/amd-unveils-helion-rack-blueprint-for-cpu-heavy/Threat Timesen2026-10-12T18:51:57ZAMD unveils Helion rack blueprint for CPU-heavy AI agent workloadshttps://threattimes.com/category/ai/nvidia-submits-mgx-1-2-cpu-rack-standards-to-ocp/Threat Timesen2026-10-12T18:51:57ZNVIDIA submits MGX 1.2, CPU rack standards to OCP to streamline global AI deploymenthttps://threattimes.com/category/vulnerabilities/wordfence-argus-finds-critical-ghostscript-flaw/Threat Timesen2026-10-12T18:35:22ZWordfence Argus Finds Critical Ghostscript Flaw Allowing Remote Code Executionhttps://threattimes.com/category/tech/ionq-to-acquire-zero-trust-vendor-elisity-in-1-3/Threat Timesen2026-10-12T18:33:39ZIonQ to Acquire Zero Trust Vendor Elisity in $1.3 Billion All-Stock Dealhttps://threattimes.com/category/vulnerabilities/edimax-br-6208ac-command-injection-flaw-cve-2026-2/Threat Timesen2026-10-12T18:13:35ZCritical Command Injection Flaw Found in Unsupported Edimax BR-6208AC Router Firmwarehttps://threattimes.com/category/tech/google-rolls-out-first-2026-update-for-chromecast/Threat Timesen2026-10-12T18:10:43ZGoogle rolls out first 2026 update for Chromecast with Google TV (4K)https://threattimes.com/category/tech/meta-muse-wonder-full-matches-sonnet-5-5-on/Threat Timesen2026-10-12T18:10:43ZMeta Muse Wonder Full Matches Sonnet 5.5 on Artificial Analysis Benchmarkhttps://threattimes.com/category/ai/meta-releases-muse-wonder-ai-model-claims-parity/Threat Timesen2026-10-12T18:10:43ZMeta releases Muse Wonder AI model, claims parity with ChatGPT and Claudehttps://threattimes.com/category/ai/github-details-methods-to-tailor-copilot-behavior/Threat Timesen2026-10-12T18:10:43ZGitHub details methods to tailor Copilot behavior for specific codebaseshttps://threattimes.com/category/vulnerabilities/critical-severity-insecure-direct-object/Threat Timesen2026-10-12T18:02:41ZObsidian-TC Critical Flaw Allows Cross-Vault Data Theft Before 1.3.1https://threattimes.com/category/ai/metas-muse-wonder-full-model-rivals-top-ai/Threat Timesen2026-10-12T17:55:07ZMeta’s Muse Wonder Full Model Rivals Top AI Systems in New Benchmarkshttps://threattimes.com/category/tech/pew-research-finds-majority-of-us-adults-refuse/Threat Timesen2026-10-12T17:54:47ZPew Research finds majority of US adults refuse to use AI chatbotshttps://threattimes.com/category/ai/zuckerberg-claims-metas-wonder-model-matches-ai/Threat Timesen2026-10-12T17:54:47ZZuckerberg claims Meta’s Wonder model matches AI rivals, rejects slowdown callshttps://threattimes.com/category/ai/meta-launches-muse-wonder-ai-model-for-digital/Threat Timesen2026-10-12T17:54:47ZMeta launches Muse Wonder AI model for digital assistantshttps://threattimes.com/category/vulnerabilities/edimax-br-6208ac-command-injection-flaw-cve-2026/Threat Timesen2026-10-12T17:51:23ZEdimax BR-6208AC 1.32 Has Critical Remote Code Injection Flawhttps://threattimes.com/category/ai/meta-to-power-muse-ai-agent-with-wonder-model-for/Threat Timesen2026-10-12T17:43:43ZMeta to Power Muse AI Agent With Wonder Model for Subscribers Firsthttps://threattimes.com/category/malware/bitdefender-identifies-firmware-level-malware-in/Threat Timesen2026-10-12T17:43:22ZBitdefender Identifies Firmware-Level Malware in Budget Android Phones From Supply Chain Compromisehttps://threattimes.com/category/ai/meta-launches-wonder-ai-models-with-active-memory/Threat Timesen2026-10-12T17:43:22ZMeta Launches Wonder AI Models With Active Memory and Focus Featureshttps://threattimes.com/category/vulnerabilities/cve-2026-108915-buffer-overflow-flaw-in-edimax-br/Threat Timesen2026-10-12T17:34:08ZPublic exploit targets unpatched buffer overflow in Edimax BR-6208AC router firmwarehttps://threattimes.com/category/tech/hello-games-to-launch-no-mans-sky-on-ios-devices/Threat Timesen2026-10-12T17:27:47ZHello Games to launch No Man's Sky on iOS devices on October 28 with reduced sizehttps://threattimes.com/category/tech/apple-to-unveil-homeview-hub-and-new-accessories/Threat Timesen2026-10-12T17:27:47ZApple to Unveil HomeView Hub and New Accessories at Welcome Home Eventhttps://threattimes.com/category/ai/us-air-force-awards-windborne-systems-nearly-50/Threat Timesen2026-10-12T17:27:47ZUS Air Force awards WindBorne Systems nearly $50 million for weather balloon datahttps://threattimes.com/category/vulnerabilities/grav-login-oauth-plugin-vulnerability-allows/Threat Timesen2026-10-12T17:27:47ZGrav Login OAuth Plugin Vulnerability Allows Unauthenticated Admin Access