https://threattimes.com/category/cyber-attacks/fbi-and-north-macedonia-dismantle-olvx-illicit/Threat Timesen2026-10-15T07:07:28ZFBI and North Macedonia Dismantle OLVX Illicit Data Marketplacehttps://threattimes.com/category/ai/llama-for-windows-enables-local-ai-model/Threat Timesen2026-10-15T07:07:28ZLlama for Windows enables local AI model execution without administrative privilegeshttps://threattimes.com/category/cyber-attacks/attackers-used-prompt-injection-to-steal-keys-and/Threat Timesen2026-10-15T06:58:47ZAttackers used prompt injection to steal keys and target AI labs in Anthropic reporthttps://threattimes.com/category/ai/sherry-turkle-discusses-ai-chatbots-and-human/Threat Timesen2026-10-15T06:58:47ZSherry Turkle Discusses AI Chatbots and Human-Machine Relations in New York Times Interviewhttps://threattimes.com/category/malware/kgb-rat-uses-crypter-to-bypass-defender-in-new/Threat Timesen2026-10-15T06:58:46ZKGB RAT Uses Crypter to Bypass Defender in New Malware Campaignhttps://threattimes.com/category/cloud-security/microsoft-azure-blog-reveals-deep-dive-into-maia/Threat Timesen2026-10-15T06:57:03ZMicrosoft Azure Blog Reveals Deep Dive Into Maia 300 Architecturehttps://threattimes.com/category/tech/microsoft-opens-integrated-hsm-technology-to/Threat Timesen2026-10-15T06:51:21ZMicrosoft Opens Integrated HSM Technology to Advance Hardware Securityhttps://threattimes.com/category/privacy/eff-aclu-of-wisconsin-petition-state-supreme/Threat Timesen2026-10-15T06:48:04ZEFF, ACLU of Wisconsin Petition State Supreme Court on ALPR Warrantshttps://threattimes.com/category/tech/lehigh-researchers-build-150-kwh-concrete-thermal/Threat Timesen2026-10-15T06:48:04ZLehigh researchers build 150 kWh concrete thermal battery for data center heat reusehttps://threattimes.com/category/ai/open-specs-can-slash-ai-hardware-integration-time/Threat Timesen2026-10-15T06:48:04ZOpen specs can slash AI hardware integration time from a year to monthshttps://threattimes.com/category/tech/datalab-launches-omniparsebench-to-audit-ocr/Threat Timesen2026-10-15T06:48:04ZDatalab Launches OmniParseBench to Audit OCR Parsers with 16,288 Testshttps://threattimes.com/category/tech/youtube-discusses-audiobook-feature-with/Threat Timesen2026-10-15T06:48:04ZYouTube Discusses Audiobook Feature With Publishers for Premium Bundlehttps://threattimes.com/category/ai/l-acoustics-uses-machine-learning-to-isolate/Threat Timesen2026-10-15T06:43:56ZL-Acoustics uses machine learning to isolate artist voices at live concertshttps://threattimes.com/category/ai/gudea-uses-ai-to-track-online-rumor-spread-and/Threat Timesen2026-10-15T06:37:19ZGudea Uses AI to Track Online Rumor Spread and Prevent Social Media Criseshttps://threattimes.com/category/tech/early-benchmarks-show-iphone-duo-a20-pro/Threat Timesen2026-10-15T06:37:14ZEarly Benchmarks Show iPhone Duo A20 Pro Performance Matches iPhone 18 Prohttps://threattimes.com/category/privacy/federal-appeals-court-allows-florida-to-enforce/Threat Timesen2026-10-15T06:37:14ZFederal appeals court allows Florida to enforce social media ban for users under 14https://threattimes.com/category/tech/apate-and-four-other-startups-advance-to/Threat Timesen2026-10-15T06:36:50ZApate and four other startups advance to TechCrunch Disrupt 2026 Battlefield finalshttps://threattimes.com/category/tech/windows-11-update-kb5127648-breaks-xbox-sign-in/Threat Timesen2026-10-15T06:36:19ZWindows 11 Update KB5127648 Breaks Xbox Sign-In with Error Code 0x87DD0005https://threattimes.com/category/vulnerabilities/hiddenlayer-finds-typesafe-ai-jev-decision-model/Threat Timesen2026-10-15T06:36:19ZHiddenLayer finds TypeSafe AI Jev decision model vulnerable to indirect prompt injectionhttps://threattimes.com/category/ai/eight-us-states-sue-openai-over-chatgpt-safety/Threat Timesen2026-10-15T06:29:02ZEight US States Sue OpenAI Over ChatGPT Safety and Parental Deceptionhttps://threattimes.com/category/tech/openai-agrees-to-preserve-device-data-in-ongoing/Threat Timesen2026-10-15T06:29:02ZOpenAI Agrees to Preserve Device Data in Ongoing Apple Trade Secret Disputehttps://threattimes.com/category/privacy/flock-ceo-defends-surveillance-tech-at-techcrunch/Threat Timesen2026-10-15T06:28:17ZFlock CEO defends surveillance tech at TechCrunch Disrupt amid privacy backlashhttps://threattimes.com/category/ai/ricursive-intelligence-aims-to-automate-chip/Threat Timesen2026-10-15T06:28:17ZRicursive Intelligence aims to automate chip design to solve compute crisishttps://threattimes.com/category/tech/fake-chrome-app-with-100-000-downloads-linked-to/Threat Timesen2026-10-15T06:21:27ZFake Chrome App With 100,000 Downloads Linked to Hizbartech on Google Playhttps://threattimes.com/category/ai/democratic-senators-question-metas-6-6b-in/Threat Timesen2026-10-15T06:14:43ZDemocratic senators question Meta's $6.6B in federal tax credits for AI data centershttps://threattimes.com/category/ai/epic-games-mandates-ai-first-workflows-for-code/Threat Timesen2026-10-15T06:14:43ZEpic Games mandates AI-first workflows for code and art on new shooterhttps://threattimes.com/category/tech/solidigm-seeks-us-approval-to-export-chip/Threat Timesen2026-10-15T06:14:43ZSolidigm seeks US approval to export chip equipment to China for Dalian planthttps://threattimes.com/category/ai/tsmc-q3-revenue-hits-record-46-36-billion-on-ai/Threat Timesen2026-10-15T06:10:19ZTSMC Q3 Revenue Hits Record $46.36 Billion on AI Chip Demandhttps://threattimes.com/category/threat-intel/tag-193-targets-diplomacy-and-resources-in-russia/Threat Timesen2026-10-15T06:09:01ZTAG-193 Targets Diplomacy and Resources in Russia, CIS States via Spearphishinghttps://threattimes.com/category/ai/anthropic-ipo-valuation-may-face-pressure-from/Threat Timesen2026-10-15T06:03:55ZAnthropic IPO Valuation May Face Pressure From Slowing Revenue Growth Trendshttps://threattimes.com/category/tech/bytedance-in-advanced-talks-to-buy-data-center/Threat Timesen2026-10-15T06:03:55ZByteDance in Advanced Talks to Buy Data Center ASICs from MediaTekhttps://threattimes.com/category/cyber-attacks/guardos-iphone-app-bundles-qr-scanning-breach/Threat Timesen2026-10-15T06:03:55ZGuardOS iPhone App Bundles QR Scanning, Breach Checks, and Safari Filteringhttps://threattimes.com/category/ai/asian-chipmakers-extend-losses-as-fed-rate-and-ai/Threat Timesen2026-10-15T06:03:55ZAsian chipmakers extend losses as Fed rate and AI funding fears mounthttps://threattimes.com/category/ai/google-awards-36-million-to-17-groups-using-ai/Threat Timesen2026-10-15T05:57:54ZGoogle Awards $36 Million to 17 Groups Using AI for Scientific Breakthroughshttps://threattimes.com/category/tech/asml-projects-china-to-drive-20-of-annual-sales/Threat Timesen2026-10-15T05:52:54ZASML Projects China to Drive 20% of Annual Sales After Q3 Surgehttps://threattimes.com/category/tech/figma-launches-specs-editor-and-code-layers-beta/Threat Timesen2026-10-15T05:52:53ZFigma launches Specs editor and code layers beta for AI agent controlhttps://threattimes.com/category/ai/jetbrains-report-ai-code-changes-create-ci-cd/Threat Timesen2026-10-15T05:52:53ZJetBrains Report: AI Code Changes Create CI/CD Review Bottleneckshttps://threattimes.com/category/tech/spacexai-grok-voice-3-0-tops-artificial-analysis/Threat Timesen2026-10-15T05:51:29ZSpaceXAI Grok Voice 3.0 Tops Artificial Analysis Speech-to-Speech Index With 86.9 Scorehttps://threattimes.com/category/ai/immuta-ciso-warns-of-critical-ai-agent-incidents/Threat Timesen2026-10-15T05:51:29ZImmuta CISO warns of critical AI agent incidents at major enterpriseshttps://threattimes.com/category/ai/chainalysis-data-shows-agentic-commerce-on/Threat Timesen2026-10-15T05:51:29ZChainalysis Data Shows Agentic Commerce on Coinbase Base Surged to 138 Million Transactions in Q3 2026https://threattimes.com/category/cyber-attacks/uat-6275-hackers-exploit-winrar-flaw-in-cis/Threat Timesen2026-10-15T05:40:23ZUAT-6275 Hackers Exploit WinRAR Flaw in CIS Government Espionage Campaignhttps://threattimes.com/category/cyber-attacks/censys-data-shows-ai-software-exposure-surges-63/Threat Timesen2026-10-15T05:40:23ZCensys Data Shows AI Software Exposure Surges 63% in Nine Monthshttps://threattimes.com/category/tech/idc-reports-record-22-drop-in-global-smartphone/Threat Timesen2026-10-15T05:40:02ZIDC reports record 22% drop in global smartphone shipments for Q3https://threattimes.com/category/tech/yoti-revenue-surges-past-32m-amid-uk-growth-and/Threat Timesen2026-10-15T05:27:28ZYoti Revenue Surges Past £32M Amid UK Growth and Spanish Regulatory Hurdleshttps://threattimes.com/category/tech/nordic-firms-deploy-nvidia-infrastructure-for-ai/Threat Timesen2026-10-15T05:22:08ZNordic firms deploy NVIDIA infrastructure for AI, supercomputing and agentic systemshttps://threattimes.com/category/vulnerabilities/aws-research-studio-fixes-cve-2026-14904-file/Threat Timesen2026-10-15T05:14:04ZAWS Research Studio Fixes CVE-2026-14904 File Read Flaw in Auth APIhttps://threattimes.com/category/vulnerabilities/aws-healthlake-mcp-server-ssrf-flaw-allows/Threat Timesen2026-10-15T04:59:21ZAWS HealthLake MCP Server SSRF Flaw Allows Credential Theft Before 0.0.14https://threattimes.com/category/vulnerabilities/aws-patches-authenticated-sql-injection-flaw-in/Threat Timesen2026-10-15T04:59:21ZAWS patches authenticated SQL injection flaw in open-source mcp-gateway-registryhttps://threattimes.com/category/vulnerabilities/aws-api-mcp-server-patch-fixes-policy-bypass-in/Threat Timesen2026-10-15T04:59:05ZAWS API MCP Server Patch Fixes Policy Bypass in Startup Failurehttps://threattimes.com/category/vulnerabilities/aws-fixes-athena-synapse-connector-flaw-allowing/Threat Timesen2026-10-15T04:58:33ZAWS Fixes Athena Synapse Connector Flaw Allowing Data Leakage via Crafted Table Nameshttps://threattimes.com/category/vulnerabilities/aws-patches-bedrock-agentcore-sdk-flaw-allowing/Threat Timesen2026-10-15T04:58:33ZAWS patches Bedrock AgentCore SDK flaw allowing sandbox command injectionhttps://threattimes.com/category/vulnerabilities/aws-patches-os-command-injection-flaw-in-jsii/Threat Timesen2026-10-15T04:47:16ZAWS patches OS command injection flaw in jsii-diff toolhttps://threattimes.com/category/vulnerabilities/aws-patches-path-traversal-flaw-in-healthomics/Threat Timesen2026-10-15T04:47:16ZAWS patches path traversal flaw in HealthOmics MCP Serverhttps://threattimes.com/category/vulnerabilities/aws-patches-bedrock-agentcore-sdk-flaw-that/Threat Timesen2026-10-15T04:46:59ZAWS patches Bedrock AgentCore SDK flaw that leaked prompts to CloudWatch logshttps://threattimes.com/category/vulnerabilities/aws-patches-silent-record-drop-and-memory-leak-in/Threat Timesen2026-10-15T04:46:36ZAWS patches silent record drop and memory leak in s2n-tls libraryhttps://threattimes.com/category/vulnerabilities/aws-patches-credential-leak-in-strands-agents/Threat Timesen2026-10-15T04:45:51ZAWS patches credential leak in Strands Agents elasticsearch_memory toolhttps://threattimes.com/category/vulnerabilities/aws-fixes-unauthenticated-slowloris-dos-flaw-in/Threat Timesen2026-10-15T04:44:06ZAWS Fixes Unauthenticated Slowloris DoS Flaw in Smithy-RS HTTP Serverhttps://threattimes.com/category/ai/huntress-warns-ai-risks-and-ransomware-shifts/Threat Timesen2026-10-15T04:36:41ZHuntress warns AI risks and ransomware shifts demand tested incident response plans in 2026https://threattimes.com/category/tech/huntress-research-highlights-architectural-limits/Threat Timesen2026-10-15T04:36:41ZHuntress Research Highlights Architectural Limits of Microsoft VSS for Modern Data Protectionhttps://threattimes.com/category/vulnerabilities/cve-2026-108587-unrestricted-file-upload-flaw-in/Threat Timesen2026-10-15T04:29:32Z10Web Booster Plugin Flaw Allows Unauthenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/dockhand-auth-bypass-cve-2026-110130-allows/Threat Timesen2026-10-15T04:26:34ZDockhand Auth Bypass CVE-2026-110130 Allows Remote Account Takeoverhttps://threattimes.com/category/vulnerabilities/vulncheck-finds-joint-advisory-chinese-threat/Threat Timesen2026-10-15T04:26:34ZVulnCheck Finds Joint Advisory Chinese Threat Actor IPs Still Active in May 2026https://threattimes.com/category/tech/sucuri-guide-details-how-500-errors-mask-website/Threat Timesen2026-10-15T04:24:29ZSucuri Guide Details How 500 Errors Mask Website Compromise and Config Failureshttps://threattimes.com/category/malware/recorded-future-research-clarifies-malware-ioc/Threat Timesen2026-10-15T04:03:01ZRecorded Future Research Clarifies Malware IoC Utility and Limitationshttps://threattimes.com/category/vulnerabilities/insikt-group-reports-29-surge-in-high-impact/Threat Timesen2026-10-15T04:03:01ZInsikt Group Reports 29% Surge in High-Impact Vulnerabilities for September 2026https://threattimes.com/category/tech/u-s-government-disrupts-famous-chollima-cyber/Threat Timesen2026-10-15T04:03:01ZU.S. Government Disrupts FAMOUS CHOLLIMA Cyber Operation With CrowdStrike Assistancehttps://threattimes.com/category/ai/nvidia-expands-agentic-computing-investments-in/Threat Timesen2026-10-15T04:02:09ZNVIDIA Expands Agentic Computing Investments in France and UK Startup Ecosystemshttps://threattimes.com/category/cyber-attacks/huntress-details-how-clickfix-and-stolen-cookies/Threat Timesen2026-10-15T04:01:47ZHuntress details how ClickFix and stolen cookies enable rapid BEC attackshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-znuny-tracked-as-cve/Threat Timesen2026-10-15T03:55:16ZCritical Znuny flaw allows header-based login bypass in versions prior to 7.3.7https://threattimes.com/category/ai/higgsfield-integrates-gpt-6-astra-for-extended-ai/Threat Timesen2026-10-15T03:50:22ZHiggsfield Integrates GPT-6 Astra for Extended AI Video Generationhttps://threattimes.com/category/vulnerabilities/bishop-fox-finds-zero-interaction-xss-in-siemens/Threat Timesen2026-10-15T03:46:41ZBishop Fox finds zero-interaction XSS in Siemens Teamcenter login redirecthttps://threattimes.com/category/tech/healthcare-cyberattacks-cost-more-disrupt-patient/Threat Timesen2026-10-15T03:46:41ZHealthcare Cyberattacks Cost More, Disrupt Patient Care, Proofpoint Survey Findshttps://threattimes.com/category/ai/meta-scales-gem-ads-model-to-single-foundation/Threat Timesen2026-10-15T03:45:56ZMeta scales GEM ads model to single foundation for all platformshttps://threattimes.com/category/ai/agent-baseline-publishes-security-reference/Threat Timesen2026-10-15T03:35:28ZAgent Baseline Publishes Security Reference Architecture for Software Factorieshttps://threattimes.com/category/vulnerabilities/critical-severity-sql-injection-flaw-in-wheels/Threat Timesen2026-10-15T03:32:12ZCritical SQL Injection Flaw Found in Wheels Framework Versions Before 4.1.2https://threattimes.com/category/tech/aws-blog-profiles-non-traditional-cybersecurity/Threat Timesen2026-10-15T03:12:47ZAWS Blog Profiles Non-Traditional Cybersecurity Career Paths in New Serieshttps://threattimes.com/category/cyber-attacks/palo-alto-unit-42-analyzes-european-bank-breach/Threat Timesen2026-10-15T03:12:47ZPalo Alto Unit 42 Analyzes European Bank Breach Driven by Third-Party Gapshttps://threattimes.com/category/ai/openai-research-eu-businesses-are-increasingly/Threat Timesen2026-10-15T03:04:12ZOpenAI research: EU businesses are increasingly adopting agentic AI toolshttps://threattimes.com/category/tech/google-deepmind-and-singapore-govtech-deploy-on-2/Threat Timesen2026-10-15T03:04:03ZGoogle DeepMind and Singapore GovTech Deploy On-Device AI for Scam Detectionhttps://threattimes.com/category/tech/google-deepmind-and-singapore-govtech-deploy-on/Threat Timesen2026-10-15T03:04:03ZGoogle DeepMind and Singapore GovTech Deploy On-Device AI to Block Scamshttps://threattimes.com/category/ai/european-cities-deploy-nvidia-ai-agents-for-urban/Threat Timesen2026-10-15T03:04:03ZEuropean Cities Deploy NVIDIA AI Agents for Urban Operations and Planninghttps://threattimes.com/category/tech/nvidia-commits-250m-to-uk-agentic-safety-backs/Threat Timesen2026-10-15T03:04:03ZNVIDIA commits $250M to UK agentic safety, backs five new startupshttps://threattimes.com/category/ai/third-moment-research-runs-10-000-ai-agents-for/Threat Timesen2026-10-15T02:54:31ZThird Moment Research Runs 10,000 AI Agents for 36 Hours Using OpenAI Modelshttps://threattimes.com/category/tech/google-provides-200-european-scientists-with-ai/Threat Timesen2026-10-15T02:54:31ZGoogle provides 200 European scientists with AI compute credits and model accesshttps://threattimes.com/category/ai/wiz-launches-ai-agents-for-fedramp-high/Threat Timesen2026-10-15T02:45:20ZWiz launches AI agents for FedRAMP High government cloud securityhttps://threattimes.com/category/tech/malwarebytes-labs-finds-fake-calendly-pages/Threat Timesen2026-10-15T02:45:20ZMalwarebytes Labs Finds Fake Calendly Pages Stealing Meta and Google Loginshttps://threattimes.com/category/malware/sentinelone-uses-openai-daybreak-to-cut-malware/Threat Timesen2026-10-15T02:45:20ZSentinelOne Uses OpenAI Daybreak to Cut Malware Analysis Time From Weeks to Hourshttps://threattimes.com/category/ai/openai-research-shows-amp-agents-using-gpt-6/Threat Timesen2026-10-15T02:45:13ZOpenAI Research Shows Amp Agents Using GPT-6 Astra and Live Modelshttps://threattimes.com/category/tech/google-frightgeist-reveals-top-halloween-search/Threat Timesen2026-10-15T02:45:13ZGoogle Frightgeist Reveals Top Halloween Search Trends for 2026https://threattimes.com/category/tech/bishop-fox-research-highlights-physical-pen/Threat Timesen2026-10-15T02:32:13ZBishop Fox research highlights physical pen testing for secure meeting roomshttps://threattimes.com/category/vulnerabilities/rapid7-discovers-over-80-vulnerabilities-in/Threat Timesen2026-10-15T02:32:13ZRapid7 Discovers Over 80 Vulnerabilities in Zimbra Collaboration Suitehttps://threattimes.com/category/cyber-attacks/microsoft-disrupts-chinese-language-phishing/Threat Timesen2026-10-15T02:32:13ZMicrosoft Disrupts Chinese-Language Phishing Ecosystem Storm-2990https://threattimes.com/category/tech/socket-adds-dependency-scanning-to-cursors-origin/Threat Timesen2026-10-15T02:32:13ZSocket Adds Dependency Scanning to Cursor’s Origin App Marketplacehttps://threattimes.com/category/tech/cisco-talos-links-uat-6275-to-kazakhstan-targets/Threat Timesen2026-10-15T02:17:43ZCisco Talos Links UAT-6275 to Kazakhstan, Targets CIS Government Agencieshttps://threattimes.com/category/threat-intel/malicious-automation-fled-yandex-infrastructure/Threat Timesen2026-10-15T02:13:50ZMalicious automation fled Yandex infrastructure after strikes, shifting to other networks despite crawler halthttps://threattimes.com/category/cyber-attacks/horizon3-and-torq-publish-brief-on-integrated/Threat Timesen2026-10-15T02:06:59ZHorizon3 and Torq Publish Brief on Integrated Attack Path Remediation and Verificationhttps://threattimes.com/category/vulnerabilities/cortex-xsoar-and-xsiam-users-urged-to-update-to-1/Threat Timesen2026-10-15T01:57:49ZCortex XSOAR and XSIAM Users Urged to Update to 1.0.17 to Fix Admin Command Injectionhttps://threattimes.com/category/ai/texas-mandates-annual-cybersecurity-and-ai/Threat Timesen2026-10-15T01:52:44ZTexas mandates annual cybersecurity and AI training for state and local staffhttps://threattimes.com/category/cyber-attacks/microsoft-health-isac-disrupt-yam-store-phishing/Threat Timesen2026-10-15T01:52:43ZMicrosoft, Health-ISAC Disrupt YAM Store Phishing Marketplace Behind 1 Billion Messageshttps://threattimes.com/category/cyber-attacks/huntress-rmm-abuse-jumps-277-percent-in-2026/Threat Timesen2026-10-15T01:42:10ZHuntress: RMM Abuse Jumps 277 Percent in 2026 Cyber Threat Landscapehttps://threattimes.com/category/cyber-attacks/huntress-research-bec-attacks-cost-businesses-55/Threat Timesen2026-10-15T01:42:10ZHuntress research: BEC attacks cost businesses $55 billion globallyhttps://threattimes.com/category/cyber-attacks/microsoft-and-japan-dismantle-yam-store-phishing/Threat Timesen2026-10-15T01:41:53ZMicrosoft and Japan Dismantle YAM Store Phishing Marketplacehttps://threattimes.com/category/malware/huntress-report-manufacturing-attacks-jumped-to/Threat Timesen2026-10-15T01:28:44ZHuntress Report: Manufacturing Attacks Jumped to 17% of Total Incidents in 2025https://threattimes.com/category/tech/huntress-publishes-guide-to-13-cybersecurity/Threat Timesen2026-10-15T01:28:33ZHuntress Publishes Guide to 13 Cybersecurity Frameworks for 2027https://threattimes.com/category/ai/google-research-unveils-new-ai-capabilities-for/Threat Timesen2026-10-15T01:28:33ZGoogle Research Unveils New AI Capabilities for Health and Science at 2026 Eventhttps://threattimes.com/category/cyber-attacks/huntress-passkeys-fail-if-attackers-target/Threat Timesen2026-10-15T01:20:47ZHuntress: Passkeys Fail If Attackers Target Enrollment and Recovery Flowshttps://threattimes.com/category/ai/socket-ciso-discusses-vendor-trust-and-ai-tooling/Threat Timesen2026-10-15T01:20:13ZSocket CISO Discusses Vendor Trust and AI Tooling Costs on Early Adopters Podcasthttps://threattimes.com/category/vulnerabilities/windows-schannel-vulnerability-cve-2026-105008/Threat Timesen2026-10-15T01:04:58ZWindows Schannel vulnerability CVE-2026-105008 rated CVSS 9.0 allows unauthorized network spoofing attackshttps://threattimes.com/category/tech/epic-games-unveils-ai-assisted-launcher-preview/Threat Timesen2026-10-15T00:51:08ZEpic Games unveils AI-assisted launcher preview targeting Steam speedhttps://threattimes.com/category/ai/wiz-details-aspm-strategy-to-unify-app-security/Threat Timesen2026-10-15T00:32:48ZWiz details ASPM strategy to unify app security scanner datahttps://threattimes.com/category/cloud-security/aws-continuum-for-penetration-testing-automates/Threat Timesen2026-10-15T00:32:48ZAWS Continuum for Penetration Testing Automates Exploitable Vulnerability Checks in CI/CD Pipelineshttps://threattimes.com/category/cyber-attacks/unit-42-reveals-peerstitch-implant-targeting/Threat Timesen2026-10-15T00:32:48ZUnit 42 Reveals PEERSTITCH Implant Targeting FortiGate Firewallshttps://threattimes.com/category/cyber-attacks/threat-actor-uses-ai-framework-to-steal-data-from/Threat Timesen2026-10-14T23:57:16ZThreat Actor Uses AI Framework to Steal Data From South Korean Bankshttps://threattimes.com/category/malware/europol-flags-4-340-urls-as-ransomware-gangs/Threat Timesen2026-10-14T23:13:18ZEuropol flags 4,340 URLs as ransomware gangs escalate attacks with threats against familieshttps://threattimes.com/category/vulnerabilities/palo-alto-networks-checkov-3-3-has-medium/Threat Timesen2026-10-14T23:03:52ZPalo Alto Networks Checkov 3.3 Has Medium Severity Path Traversal Flawhttps://threattimes.com/category/vulnerabilities/cisco-patches-actively-exploited-zero-day-in/Threat Timesen2026-10-14T23:03:52ZCisco patches actively exploited zero-day in Secure Email Gateway applianceshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-gitpython-developers/Threat Timesen2026-10-14T22:57:47ZCritical RCE Flaw in GitPython Allows Remote Code Execution via Refspec Manipulationhttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-6/Threat Timesen2026-10-14T22:57:47ZBetter Auth flaw allows unauthenticated login via OAuth state reusehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-5/Threat Timesen2026-10-14T22:57:47ZBetter Auth CVE-2026-110864 Allows Unauthenticated Account Takeover via OAuth Proxyhttps://threattimes.com/category/vulnerabilities/cve-2026-110867-incorrect-authorization-flaw-in/Threat Timesen2026-10-14T22:57:47ZRenovate vulnerability allows attackers to bypass environment variable restrictionshttps://threattimes.com/category/tech/openai-claims-ex-employee-leaked-device-files-to/Threat Timesen2026-10-14T22:18:01ZOpenAI Claims Ex-Employee Leaked Device Files to Apple in Trade Secret Suithttps://threattimes.com/category/ai/deezer-to-launch-toggle-filtering-ai-generated/Threat Timesen2026-10-14T22:10:03ZDeezer to launch toggle filtering AI-generated music by year-endhttps://threattimes.com/category/tech/apples-folding-iphone-sees-999-out-of-warranty/Threat Timesen2026-10-14T21:52:12ZApple's folding iPhone sees $999 out-of-warranty screen repair costshttps://threattimes.com/category/tech/hackers-exploit-unpatched-refrigeration/Threat Timesen2026-10-14T21:52:12ZHackers Exploit Unpatched Refrigeration Controllers to Disrupt 700 European Supermarketshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-hitachi-vantara-remot/Threat Timesen2026-10-14T21:48:33ZHitachi Vantara Agent Flaw Lets Attackers Forge Tokens for Admin Accesshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-hitachi-vantara-remote/Threat Timesen2026-10-14T21:42:34ZHitachi Vantara Remote Ops Agent Has Critical Password Reset Flawhttps://threattimes.com/category/vulnerabilities/cert-fr-multiples-vuln-rabilit-s-dans-gitlab-12/Threat Timesen2026-10-14T21:40:31ZCERT-FR: Multiples vulnérabilités dans GitLab (12 octobre 2026)https://threattimes.com/category/tech/google-android-silently-links-phone-numbers/Threat Timesen2026-10-14T20:51:45ZGoogle Android Silently Links Phone Numbers Across All Signed-In Accountshttps://threattimes.com/category/tech/modal-raises-750m-series-d-at-15-75b-valuation-as/Threat Timesen2026-10-14T20:49:31ZModal raises $750M Series D at $15.75B valuation as revenue tops $1Bhttps://threattimes.com/category/vulnerabilities/xbow-researchers-chain-three-zero-days-in-chrome/Threat Timesen2026-10-14T20:49:31ZXbow Researchers Chain Three Zero-Days in Chrome Using AI Modelhttps://threattimes.com/category/tech/homepod-mini-2-brings-s10-chip-and-wi-fi-6e-to/Threat Timesen2026-10-14T20:34:17ZHomePod Mini 2 brings S10 chip and Wi-Fi 6E to $149 speaker; AI Siri features wait for updatehttps://threattimes.com/category/vulnerabilities/palo-alto-networks-patches-globalprotect-identity/Threat Timesen2026-10-14T20:13:28ZPalo Alto Networks patches GlobalProtect identity spoofing flaw in PAN-OShttps://threattimes.com/category/tech/apple-homeview-relies-on-iphone-for-third-party/Threat Timesen2026-10-14T20:05:01ZApple HomeView Relies on iPhone for Third-Party App Accesshttps://threattimes.com/category/vulnerabilities/cve-2026-55684-sql-injection-flaw-in/Threat Timesen2026-10-14T19:54:17ZWeGIA 3.8.6 Patch Fixes Critical Unauthenticated SQL Injection Flawhttps://threattimes.com/category/vulnerabilities/aws-security-bulletins-cve-2026-110310-rsa-pkcs-1/Threat Timesen2026-10-14T19:52:06ZAWS Fixes RSA Padding Oracle in S3 Encryption Client for .NEThttps://threattimes.com/category/vulnerabilities/palo-alto-networks-discloses-local-dos-flaw-in/Threat Timesen2026-10-14T19:47:24ZPalo Alto Networks Discloses Local DoS Flaw in Windows GlobalProtect Apphttps://threattimes.com/category/vulnerabilities/palo-alto-networks-issues-fix-for-macos/Threat Timesen2026-10-14T19:47:24ZPalo Alto Networks Issues Fix for macOS GlobalProtect Privilege Escalationhttps://threattimes.com/category/vulnerabilities/palo-alto-networks-addresses-stored-xss-flaw-in/Threat Timesen2026-10-14T19:47:19ZPalo Alto Networks Addresses Stored XSS Flaw in PAN-OS Management Interfacehttps://threattimes.com/category/vulnerabilities/palo-alto-networks-issues-patch-for-medium/Threat Timesen2026-10-14T19:47:19ZPalo Alto Networks Issues Patch for Medium-Severity PAN-OS DoS Vulnerability CVE-2026-0321https://threattimes.com/category/vulnerabilities/labredescefetrj-wegia-sql-injection-flaw-cve-2026-2/Threat Timesen2026-10-14T19:43:51ZLabRedesCefetRJ WeGIA Fixes Critical Unauthenticated SQL Injection Flawhttps://threattimes.com/category/vulnerabilities/labredescefetrj-wegia-sql-injection-flaw-cve-2026/Threat Timesen2026-10-14T19:43:51ZWeGIA 3.8.6 Patch Fixes Critical Unauthenticated SQL Injection Flawhttps://threattimes.com/category/vulnerabilities/palo-alto-networks-fixes-medium-severity-panorama/Threat Timesen2026-10-14T19:35:58ZPalo Alto Networks Fixes Medium-Severity Panorama DoS in CVE-2026-0318https://threattimes.com/category/vulnerabilities/palo-alto-networks-patches-high-severity-chromium/Threat Timesen2026-10-14T19:35:55ZPalo Alto Networks patches high-severity Chromium flaws in Prisma Browser updatehttps://threattimes.com/category/vulnerabilities/palo-alto-networks-addresses-medium-severity/Threat Timesen2026-10-14T19:35:44ZPalo Alto Networks Addresses Medium-Severity Command Injection in PAN-OShttps://threattimes.com/category/vulnerabilities/cve-2026-101337-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T19:30:35ZNLnet Labs releases NSD 4.15.3 to fix high-severity remote code execution flawshttps://threattimes.com/category/vulnerabilities/palo-alto-networks-checkov-ssrf-vulnerability/Threat Timesen2026-10-14T19:13:27ZPalo Alto Networks Checkov SSRF Vulnerability Affects Versions 3.2.0 to 3.2.532https://threattimes.com/category/vulnerabilities/cve-2026-102748-missing-authentication-flaw-in/Threat Timesen2026-10-14T18:56:09ZCritical Unauthenticated Admin Flaw in Dgraph Zero Exposes Control Planehttps://threattimes.com/category/vulnerabilities/databasus-flaw-cve-2026-110770-rated-cvss-9-2/Threat Timesen2026-10-14T18:56:09ZDatabasus Authentication Bypass Lets Attackers Brute-Force Password Resetshttps://threattimes.com/category/cyber-attacks/experts-say-ai-lab-security-failures-not-rogue/Threat Timesen2026-10-14T18:48:15ZExperts say AI lab security failures, not rogue agents, caused recent unauthorized system accesseshttps://threattimes.com/category/malware/hirudo-trojan-bypasses-banking-app-defenses-by/Threat Timesen2026-10-14T18:48:15ZHirudo Trojan Bypasses Banking App Defenses by Injecting Hooks Into Legitimate Codehttps://threattimes.com/category/ai/salience-labs-raises-125m-for-optical-ai/Threat Timesen2026-10-14T18:48:15ZSalience Labs Raises $125M for Optical AI Switching Techhttps://threattimes.com/category/vulnerabilities/aws-security-bulletins-cve-2026-110248-insertion/Threat Timesen2026-10-14T18:42:05ZAWS Security Bulletins: CVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDKhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-stirling/Threat Timesen2026-10-14T18:38:30ZStirling-PDF Patch Fixes Critical SQL Injection Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-110536-os-command-injection-flaw-in-d/Threat Timesen2026-10-14T18:38:30ZD-Link DIR-868L Firmware 2.01b05 Has Critical Remote Command Injection Flawhttps://threattimes.com/category/vulnerabilities/getredash-redash-improper-access-control-flaw-cve/Threat Timesen2026-10-14T18:15:12ZCritical flaw in Redash allows local file read and write via DuckDBhttps://threattimes.com/category/vulnerabilities/cve-2026-102476-flaw-in-eclipse-vert-x-scores-9-1/Threat Timesen2026-10-14T18:15:12ZEclipse Vert.x CVE-2026-102476 Risks Weak SSL Contexts in HTTP Clienthttps://threattimes.com/category/vulnerabilities/e107inc-e107-sql-injection-flaw-cve-2026-55572/Threat Timesen2026-10-14T18:15:12Ze107 CMS Patched Critical Unauthenticated SQL Injection in Alt Auth Pluginhttps://threattimes.com/category/vulnerabilities/critical-severity-insecure-deserialization-flaw-16/Threat Timesen2026-10-14T18:15:12Ze107 CMS Patch Fixes Critical Unauthenticated Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/high-severity-missing-authorization-flaw-in/Threat Timesen2026-10-14T17:58:43ZMicrosoft SharePoint CVE-2026-88164 Allows Remote Privilege Escalation for Authorized Usershttps://threattimes.com/category/vulnerabilities/cve-2026-103415-out-of-bounds-write-flaw-in/Threat Timesen2026-10-14T17:47:29ZEclipse NetX Duo TLS flaw allows critical memory overwrite via server cookiehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-4/Threat Timesen2026-10-14T17:37:18ZUnauthenticated Attackers Can Take Over Juniper Junos OS Devices via J-Web Flawhttps://threattimes.com/category/vulnerabilities/high-severity-code-injection-flaw-in-palo-alto/Threat Timesen2026-10-14T17:37:18ZPalo Alto Networks Patches Authenticated RCE in PAN-OS Management Interfacehttps://threattimes.com/category/vulnerabilities/drupal-core-moderately-critical-cross-site-2/Threat Timesen2026-10-14T17:26:59ZDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015https://threattimes.com/category/vulnerabilities/drupal-core-moderately-critical-cross-site/Threat Timesen2026-10-14T17:26:59ZDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016https://threattimes.com/category/vulnerabilities/cve-2026-92152-flaw-in-nasa-fprime-scores-9-3-on/Threat Timesen2026-10-14T17:26:59ZNASA F Prime 4.1.0 Has Critical Remote Code Execution Flaw Fixed in 4.2.0https://threattimes.com/category/vulnerabilities/juniper-networks-junos-os-stack-based-buffer/Threat Timesen2026-10-14T17:26:59ZJuniper Junos OS and Evolved Face Critical Buffer Overflow in Routing Daemonhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-hestiacp/Threat Timesen2026-10-14T17:26:59ZHestia Control Panel Fixes Critical Root Privilege Escalation in Version 1.10.5https://threattimes.com/category/vulnerabilities/cve-2026-101983-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T17:26:59ZJuniper Junos OS and Evolved face critical unauthenticated RCE via J-Web buffer overflowhttps://threattimes.com/category/vulnerabilities/ahsaycbs-hotfixes-address-auth-bypass-and-rce/Threat Timesen2026-10-14T17:20:12ZAhsayCBS Hotfixes Address Auth Bypass and RCE Chain Exploited In-The-Wildhttps://threattimes.com/category/vulnerabilities/critical-severity-stack-based-buffer-overflow-2/Threat Timesen2026-10-14T17:10:50ZJuniper MX Series Routers Face Critical Unauthenticated RCE Flaw in IKE Componenthttps://threattimes.com/category/vulnerabilities/cve-2026-33789-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T17:10:50ZJuniper Networks Junos OS Vulnerable to Critical BGP Buffer Overflow CVE-2026-33789https://threattimes.com/category/vulnerabilities/cve-2026-33792-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T17:10:50ZJuniper SRX Series Faces Critical Unauthenticated Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-stack-based-buffer-overflow/Threat Timesen2026-10-14T17:10:50ZJuniper Junos OS Critical Flaw Allows Root Access via BGP Neighborhttps://threattimes.com/category/vulnerabilities/microsoft-discloses-cve-2026-84012-remote-code/Threat Timesen2026-10-14T17:03:14ZMicrosoft Discloses CVE-2026-84012 Remote Code Execution Flaw in Remote Desktop Serviceshttps://threattimes.com/category/vulnerabilities/cve-2026-102031-os-command-injection-flaw-in/Threat Timesen2026-10-14T16:59:36ZJuniper Junos OS Evolved Faces Critical TACACS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-102175-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:59:36ZJuniper Networks Junos OS Critical Heap Overflow Allows Remote Root Accesshttps://threattimes.com/category/vulnerabilities/cve-2026-102178-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:59:36ZJuniper Junos BGP Flowspec Flaw Rated Critical, Enables Remote Compromisehttps://threattimes.com/category/vulnerabilities/lantronix-xpress-dr-missing-authentication-flaw/Threat Timesen2026-10-14T16:54:50ZLantronix XPress-DR Firmware Has Critical Remote Config Flawhttps://threattimes.com/category/tech/google-waives-25-fee-for-private-ai-studio-apps/Threat Timesen2026-10-14T16:45:58ZGoogle waives $25 fee for private AI Studio apps on Play Storehttps://threattimes.com/category/vulnerabilities/microsoft-october-patch-tuesday-fixes-record-1/Threat Timesen2026-10-14T16:45:58ZMicrosoft October Patch Tuesday Fixes Record 1,413 Flaws, Including Exploited Zero-Dayhttps://threattimes.com/category/vulnerabilities/cve-2026-101950-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:42:37ZJuniper Junos OS Heap Overflow Lets Attackers Crash SRX Firewallshttps://threattimes.com/category/vulnerabilities/cve-2026-101990-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:42:37ZJuniper CVE-2026-101990: BGP Flow-Spec Buffer Overflow Triggers RCE in Junos OShttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-cisco-secure-email/Threat Timesen2026-10-14T16:31:11ZCISA Adds Cisco Email Gateway Flaw to KEV as Active Exploitation Confirmedhttps://threattimes.com/category/vulnerabilities/cve-2026-77524-improper-privilege-management-flaw/Threat Timesen2026-10-14T16:31:11ZKEDA Flaw Lets Namespace Admins Steal Cluster-Wide Operator Permissionshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-juniper-networks-junos/Threat Timesen2026-10-14T16:31:11ZJuniper Junos OS Critical Integer Underflow Vulnerability Triggers Kernel Crashhttps://threattimes.com/category/vulnerabilities/juniper-networks-junos-os-improper-authentication/Threat Timesen2026-10-14T16:31:11ZJuniper Junos OS J-Web Flaw Allows Unauthenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-101986-improper-authentication-flaw-in/Threat Timesen2026-10-14T16:31:10ZJuniper Junos OS J-Web Flaw Lets Attackers Bypass Authenticationhttps://threattimes.com/category/vulnerabilities/drupal-core-critical-remote-code-execution-sa/Threat Timesen2026-10-14T16:11:03ZDrupal Patches Critical Unauthenticated RCE in Field UI Module for Core Versionshttps://threattimes.com/category/vulnerabilities/cisco-secure-email-gateway-and-secure-email-and/Threat Timesen2026-10-14T16:04:38ZCisco Patches Critical Flaws in Email Gateway, Two Under Active Exploitationhttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-3/Threat Timesen2026-10-14T16:02:10ZZulip Server Patch Fixes Critical Auth Bypass in Versions Before 12.2https://threattimes.com/category/vulnerabilities/dokku-flaw-cve-2026-86002-rated-cvss-9/Threat Timesen2026-10-14T16:02:10ZDokku CVE-2026-86002 Critical Flaw Allows Remote Code Execution via Docker Optionshttps://threattimes.com/category/vulnerabilities/high-severity-path-traversal-flaw-in-c4illin/Threat Timesen2026-10-14T16:01:08ZCisco Fixes Critical File Write Flaw in Secure Email Gatewayhttps://threattimes.com/category/vulnerabilities/cve-2026-91881-flaw-in-dell-terraform-provider/Threat Timesen2026-10-14T15:23:47ZDell Terraform Provider for Redfish has critical certificate validation flawhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-948176-multiple-tls-libraries-can/Threat Timesen2026-10-14T15:15:34ZCERT/CC Reports TLS Libraries Bypass Name Constraint Enforcementhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-410595-google-boringssl-name/Threat Timesen2026-10-14T15:15:34ZGoogle BoringSSL fixes two name constraint bypass flaws in SAN validation logichttps://threattimes.com/category/tech/judge-grants-apple-access-to-openai-hiring-docs/Threat Timesen2026-10-14T15:12:52ZJudge grants Apple access to OpenAI hiring docs in trade secret suithttps://threattimes.com/category/tech/microsoft-october-patch-fixes-1-410-flaws-ends/Threat Timesen2026-10-14T14:33:57ZMicrosoft October Patch Fixes 1,410 Flaws, Ends Windows 11 24H2 Supporthttps://threattimes.com/category/vulnerabilities/cve-2020-37282-os-command-injection-flaw-in/Threat Timesen2026-10-14T14:31:35ZNode.js office-converter Library Exposes Critical Command Injection Flawhttps://threattimes.com/category/vulnerabilities/gravitee-api-management-flaw-cve-2020-37281-rated/Threat Timesen2026-10-14T14:31:35ZGravitee API Management Vulnerability Allows Full Admin Impersonationhttps://threattimes.com/category/vulnerabilities/cve-2026-110612-flaw-in-wwwlike-vlife-scores-9-3/Threat Timesen2026-10-14T14:31:35Zvlife Authentication Bypass Allows Unauthenticated Super Admin Accesshttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authentication-flaw-in-4/Threat Timesen2026-10-14T14:31:35ZNullHub NullClaw Has Critical Auth Bypass Flaw in Versions Through 2026.5.29https://threattimes.com/category/vulnerabilities/critical-severity-server-side-request-forgery-3/Threat Timesen2026-10-14T14:31:35ZKanbn 0.6.0 Vulnerable to Unauthenticated SSRF via Incomplete Fixhttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authentication-flaw-in-3/Threat Timesen2026-10-14T14:31:35ZCritical Flaw in Report One MyReport Updater Allows Remote Code Execution as SYSTEMhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-moghtech-komodo-tracked/Threat Timesen2026-10-14T14:31:35ZKomodo 2.3.3 Authentication Bypass Lets Attackers Execute Root Commandshttps://threattimes.com/category/vulnerabilities/scionoftech-webp-converter-os-command-injection/Threat Timesen2026-10-14T14:31:35ZCritical Command Injection Flaw Found in Node.js webp-converter Libraryhttps://threattimes.com/category/vulnerabilities/danday74-git-diff-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35ZCritical Command Injection Flaw Found in Popular Node.js git-diff Libraryhttps://threattimes.com/category/vulnerabilities/revolunet-pypdftk-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35Zpypdftk Library Critical Command Injection Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/zepspaiva-doc-recog-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35Zdoc-recog Library Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/mborne-extract-os-command-injection-flaw-cve-2026/Threat Timesen2026-10-14T14:31:35ZCritical Command Injection Flaw Found in @mborne/extract Node.js Libraryhttps://threattimes.com/category/vulnerabilities/cve-2026-110640-os-command-injection-flaw-in/Threat Timesen2026-10-14T14:31:35ZWhisper-node 1.1.1 Has Critical Command Injection Flaw Allowing Arbitrary Command Executionhttps://threattimes.com/category/vulnerabilities/chetanxpro-nodejs-whisper-os-command-injection/Threat Timesen2026-10-14T14:31:35ZNodejs-whisper Library Has Critical Command Injection Flawhttps://threattimes.com/category/vulnerabilities/kky-ykk-transcribe2texts-os-command-injection/Threat Timesen2026-10-14T14:31:35Ztranscribe2texts 1.0.6 Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-9/Threat Timesen2026-10-14T14:31:35ZVideo-stitch Library Critical OS Command Injection Flaw Exposes Node.js Process Privilegeshttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-8/Threat Timesen2026-10-14T14:31:35ZBeganovich Snappdf 6.1.0 Fixes Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/shahkashani-stills-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35ZStills Media Processing Tool Exposes Users to Critical Command Injectionhttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-7/Threat Timesen2026-10-14T14:31:35ZThumbnail Python Package Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/corelight-researchers-detail-windows-kernel-crash/Threat Timesen2026-10-14T14:10:43ZCorelight Researchers Detail Windows Kernel Crash Flaw in CVE-2026-70111https://threattimes.com/category/vulnerabilities/channel-software-weballiance-ecommerce-sql/Threat Timesen2026-10-14T13:51:19ZRapid7 Reveals Critical WebAlliance SQL Injection Allowing Remote Command Execution Without Authhttps://threattimes.com/category/ai/recruiters-cite-identical-ai-resumes-as-top/Threat Timesen2026-10-14T13:41:49ZRecruiters cite identical AI resumes as top stressor in Employ reporthttps://threattimes.com/category/vulnerabilities/tr7-asp-missing-authentication-flaw-cve-2026/Threat Timesen2026-10-14T13:04:13ZTR7 ASP Critical Flaw Allows OS Command Injection Without Authenticationhttps://threattimes.com/category/cyber-attacks/imf-warns-ai-spending-bust-could-trigger-global/Threat Timesen2026-10-14T12:51:19ZIMF warns AI spending bust could trigger global financial instabilityhttps://threattimes.com/category/vulnerabilities/tr7-asp-os-command-injection-flaw-cve-2026-16741/Threat Timesen2026-10-14T12:48:09ZNVD Rates TR7 ASP CVE-2026-16741 Critical 9.8 CVSS for OS Command Injection in Pre-1.6 Fixeshttps://threattimes.com/category/vulnerabilities/cert-cc-vu-166125-bisheng-has-authentication/Threat Timesen2026-10-14T12:44:14ZBisheng LLM Platform Has Critical Auth Bypass, IDOR Flawshttps://threattimes.com/category/tech/jury-awards-qualcomm-just-2-in-damages-against/Threat Timesen2026-10-14T12:36:45ZJury awards Qualcomm just $2 in damages against Arm despite breach verdicthttps://threattimes.com/category/ai/scimplify-raises-25m-to-expand-ai-driven-critical/Threat Timesen2026-10-14T12:36:45ZScimplify raises $25M to expand AI-driven critical materials productionhttps://threattimes.com/category/vulnerabilities/m-a-vinoth-kumar-frontend-dashboard-flaw-cve-2026/Threat Timesen2026-10-14T12:31:40ZCritical Privilege Escalation Flaw Found in Frontend Dashboard Plugin Versions Through 3.0.7https://threattimes.com/category/vulnerabilities/itthinx-affiliates-insecure-deserialization-flaw/Threat Timesen2026-10-14T12:31:40ZCritical Object Injection Flaw Found in itthinx Affiliates Plugin Versions Up to 7.0.1https://threattimes.com/category/vulnerabilities/cve-2026-83910-critical-rpc-runtime-oob-write/Threat Timesen2026-10-14T12:17:01ZCVE-2026-83910: Critical RPC Runtime OOB Write Lets Attackers Execute Code Remotelyhttps://threattimes.com/category/vulnerabilities/microsoft-addresses-windows-dhcp-server-remote/Threat Timesen2026-10-14T12:11:47ZMicrosoft Addresses Windows DHCP Server Remote Code Execution Vulnerabilityhttps://threattimes.com/category/ai/google-launches-gemini-4-argon-with-introductory/Threat Timesen2026-10-14T11:44:41ZGoogle launches Gemini 4 Argon with introductory pricing that doubles in Novemberhttps://threattimes.com/category/cloud-security/apple-researchers-publish-details-on-minions-a/Threat Timesen2026-10-14T11:38:25ZApple Researchers Publish Details on Minions, a Distributed GPU Cloud Using Idle Macshttps://threattimes.com/category/cyber-attacks/doj-arrests-two-us-nationals-in-north-korean/Threat Timesen2026-10-14T11:22:20ZDOJ Arrests Two US Nationals in North Korean Laptop Farm Raidhttps://threattimes.com/category/vulnerabilities/justice-department-announces-coordinated-actions/Threat Timesen2026-10-14T11:03:27ZDOJ Charges 14 in North Korean Remote IT Worker Scheme Affecting 70 US Firmshttps://threattimes.com/category/ai/anthropic-launches-critical-infrastructure/Threat Timesen2026-10-14T11:01:42ZAnthropic launches Critical Infrastructure Defense Program with 11 security partnershttps://threattimes.com/category/vulnerabilities/microsoft-sets-2027-deadline-for-refs-hardening/Threat Timesen2026-10-14T10:47:35ZMicrosoft sets 2027 deadline for ReFS hardening on removable storagehttps://threattimes.com/category/ai/openai-engineer-charged-with-planting-listening/Threat Timesen2026-10-14T10:25:28ZOpenAI engineer charged with planting listening device in executive conference roomhttps://threattimes.com/category/cyber-attacks/huntress-finds-fake-watchguard-site-steals/Threat Timesen2026-10-14T10:07:10ZHuntress Finds Fake WatchGuard Site Steals Credentials Before Serving Real Installerhttps://threattimes.com/category/vulnerabilities/microsoft-patches-windows-smartscreen-privilege/Threat Timesen2026-10-14T09:51:24ZMicrosoft Patches Windows SmartScreen Privilege Escalation Flaw CVE-2026-85851https://threattimes.com/category/vulnerabilities/coruna-and-darksword-exploit-kits-compromise/Threat Timesen2026-10-14T09:35:19ZCoruna and DarkSword exploit kits compromise iPhones via single web visithttps://threattimes.com/category/vulnerabilities/microsoft-outlook-double-free-vulnerability-rated/Threat Timesen2026-10-14T09:35:18ZMicrosoft Outlook Double Free Vulnerability Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/zoom-fixes-high-severity-certificate-flaws-in/Threat Timesen2026-10-14T08:58:22ZZoom Fixes High-Severity Certificate Flaws in Workplace Clientshttps://threattimes.com/category/vulnerabilities/microsoft-windows-search-flaw-cve-2026-105010/Threat Timesen2026-10-14T08:56:24ZMicrosoft Windows Search Flaw CVE-2026-105010 Rated Critical by NVDhttps://threattimes.com/category/vulnerabilities/windows-iscsi-component-suffers-heap-overflow/Threat Timesen2026-10-14T08:56:24ZWindows iSCSI component suffers heap overflow allowing network code execution in CVE-2026-69634https://threattimes.com/category/vulnerabilities/nvd-rates-windows-iscsi-flaw-cve-2026-69705-as/Threat Timesen2026-10-14T08:56:24ZNVD rates Windows iSCSI flaw CVE-2026-69705 as critical 9.8 for unauth RCEhttps://threattimes.com/category/vulnerabilities/ivanti-connect-secure-zero-day-exploited-by/Threat Timesen2026-10-14T08:44:56ZIvanti Connect Secure Zero-Day Exploited by UTA0576 for Root Accesshttps://threattimes.com/category/ai/asml-warns-ai-chip-tool-demand-outpaces-supply/Threat Timesen2026-10-14T08:35:13ZASML warns AI chip tool demand outpaces supply through 2028https://threattimes.com/category/vulnerabilities/critical-severity-information-disclosure-flaw-in/Threat Timesen2026-10-14T08:34:21ZCopart Billing Service Flaw Exposes Customer PII and Financial Datahttps://threattimes.com/category/vulnerabilities/microsoft-discloses-critical-cve-2026-70096-in/Threat Timesen2026-10-14T07:47:33ZMicrosoft Discloses Critical CVE-2026-70096 in Windows Rich Text Edit Controlhttps://threattimes.com/category/vulnerabilities/wpazleen-simpleform-form-maker-to-chat-apps-with/Threat Timesen2026-10-14T07:47:06ZUnauthenticated Privilege Escalation in WordPress SimpleForm Plugin Allows Admin Account Creationhttps://threattimes.com/category/tech/ahold-delhaize-takes-systems-offline-after-cyber/Threat Timesen2026-10-14T07:41:56ZAhold Delhaize Takes Systems Offline After Cyber Incident Hits US, Europehttps://threattimes.com/category/vulnerabilities/microsoft-patches-three-windows-bitlocker-flaws/Threat Timesen2026-10-14T07:23:10ZMicrosoft patches three Windows BitLocker flaws allowing privilege escalationhttps://threattimes.com/category/tech/google-launches-gemini-4-argon-with-1m-token/Threat Timesen2026-10-14T07:23:10ZGoogle Launches Gemini 4 Argon With 1M Token Output and Low Priceshttps://threattimes.com/category/ai/anthropic-warns-self-replicating-ai-botnets-could/Threat Timesen2026-10-14T07:23:10ZAnthropic warns self-replicating AI botnets could hit IoT devices soonhttps://threattimes.com/category/cyber-attacks/anthropic-ai-submitted-fake-murder-tip-to/Threat Timesen2026-10-14T07:23:10ZAnthropic AI Submitted Fake Murder Tip to Philadelphia Police During Testinghttps://threattimes.com/category/tech/ios-27-2-beta-4-introduces-black-and-white-apple/Threat Timesen2026-10-14T07:10:31ZiOS 27.2 Beta 4 Introduces Black-and-White Apple Music Icon and UI Changeshttps://threattimes.com/category/ai/anthropic-warns-small-ai-models-could-self/Threat Timesen2026-10-14T07:10:31ZAnthropic warns small AI models could self-replicate on IoT devices by late 2026https://threattimes.com/category/tech/openai-engineer-arrested-for-hiding-recording/Threat Timesen2026-10-14T07:10:31ZOpenAI engineer arrested for hiding recording device in SF officehttps://threattimes.com/category/ai/openai-engineer-arrested-for-bugging-executive/Threat Timesen2026-10-14T07:10:31ZOpenAI Engineer Arrested for Bugging Executive Conference Room with Audio Recorderhttps://threattimes.com/category/tech/openai-engineer-arrested-for-allegedly-planting/Threat Timesen2026-10-14T07:10:31ZOpenAI Engineer Arrested for Allegedly Planting Bug in Executive Conference Roomhttps://threattimes.com/category/vulnerabilities/critical-severity-sql-injection-flaw-in-jtl-wms/Threat Timesen2026-10-14T07:00:52ZJTL-WMS Critical SQL Injection Flaw Allows Remote Database Manipulationhttps://threattimes.com/category/tech/ionq-acquires-elisity-in-1-3-billion-all-stock/Threat Timesen2026-10-14T06:52:55ZIonQ Acquires Elisity in $1.3 Billion All-Stock Cybersecurity Dealhttps://threattimes.com/category/vulnerabilities/microsoft-rates-openssh-for-windows-use-after/Threat Timesen2026-10-14T06:52:55ZMicrosoft Rates OpenSSH for Windows Use-After-Free Flaw as Criticalhttps://threattimes.com/category/vulnerabilities/microsoft-windows-error-reporting-flaw-rated/Threat Timesen2026-10-14T06:52:55ZMicrosoft Windows Error Reporting Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-powershell-critical-flaw-cve-2026-83578/Threat Timesen2026-10-14T06:48:50ZMicrosoft PowerShell Critical Flaw CVE-2026-83578 Allows Remote Code Execution via Integer Underflowhttps://threattimes.com/category/vulnerabilities/microsoft-windows-text-shaping-flaw-rated/Threat Timesen2026-10-14T06:39:14ZMicrosoft Windows Text Shaping Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-rates-windows-text-shaping-heap/Threat Timesen2026-10-14T06:24:58ZMicrosoft Rates Windows Text Shaping Heap Overflow as Critical CVE-2026-83770https://threattimes.com/category/vulnerabilities/microsoft-windows-partition-driver-flaw-rated/Threat Timesen2026-10-14T06:17:18ZMicrosoft Windows Partition Driver Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-windows-dhcp-server-flaw-rated-critical/Threat Timesen2026-10-14T06:17:18ZMicrosoft Windows DHCP Server Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-ole-flaw-cve-2026-96924-rated-critical/Threat Timesen2026-10-14T06:17:18ZMicrosoft OLE Flaw CVE-2026-96924 Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-outlook-heap-overflow-cve-2026-97016/Threat Timesen2026-10-14T06:17:18ZMicrosoft Outlook Heap Overflow CVE-2026-97016 Rated Critical for Remote Code Executionhttps://threattimes.com/category/data-breaches/crunchbase-data-breach-exposes-559-908-accounts/Threat Timesen2026-10-14T06:04:57ZCrunchbase Confirms Data Exfiltration Following ShinyHunters Extortion Attempthttps://threattimes.com/category/vulnerabilities/microsoft-xml-heap-overflow-vulnerability-rated/Threat Timesen2026-10-14T05:55:48ZMicrosoft XML Heap Overflow Vulnerability Rated Critical 9.8 by NVDhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-windows-libarchive/Threat Timesen2026-10-14T05:42:26ZMicrosoft warns of critical Windows libarchive remote code execution flawhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-cve-2026-85792-in/Threat Timesen2026-10-14T05:37:39ZMicrosoft Confirms Critical CVE-2026-85792 in Windows RRAS Servicehttps://threattimes.com/category/vulnerabilities/microsoft-discloses-critical-windows-imaging/Threat Timesen2026-10-14T05:18:59ZMicrosoft Discloses Critical Windows Imaging Component Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-windows-iscsi-flaw-rated-critical-for/Threat Timesen2026-10-14T05:18:59ZMicrosoft Windows iSCSI Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-critical-iis-buffer-overflow-flaw/Threat Timesen2026-10-14T05:18:17ZMicrosoft: Critical IIS Buffer Overflow Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-postscript-printer-driver-flaw-rated/Threat Timesen2026-10-14T04:39:23ZMicrosoft PostScript Printer Driver Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-rce-flaw-found-in-microsoft-postscript/Threat Timesen2026-10-14T04:39:23ZCritical RCE Flaw Found in Microsoft PostScript Printer Driverhttps://threattimes.com/category/vulnerabilities/microsoft-windows-system-info-console-has/Threat Timesen2026-10-14T04:38:28ZMicrosoft Windows System Info Console Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-outlook-critical-rce-flaw-cve-2026/Threat Timesen2026-10-14T04:18:21ZMicrosoft Outlook Critical RCE Flaw CVE-2026-70242 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-exchange-server-flaw-cve-2026-70279/Threat Timesen2026-10-14T04:18:21ZMicrosoft Exchange Server Flaw CVE-2026-70279 Rated Critical for Network Spoofinghttps://threattimes.com/category/vulnerabilities/microsoft-outlook-has-critical-remote-code/Threat Timesen2026-10-14T04:18:21ZMicrosoft Outlook Has Critical Remote Code Execution Flaw CVE-2026-70291https://threattimes.com/category/vulnerabilities/cve-2026-104800-unrestricted-file-upload-flaw-in/Threat Timesen2026-10-14T03:52:21ZWordPress AGE-GATE Plugin Has Critical Unauthenticated Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-unrestricted-file-upload-flaw-4/Threat Timesen2026-10-14T03:52:21ZCritical WordPress Plugin Flaw Allows Unauthenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-word-critical-rce-vulnerability-cve/Threat Timesen2026-10-14T03:41:52ZMicrosoft Word Critical RCE Vulnerability CVE-2026-70300 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-cve-2026-83519-critical-windows-error/Threat Timesen2026-10-14T03:41:52ZMicrosoft CVE-2026-83519: Critical Windows Error Reporting Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-windows-media-foundation-has-critical-2/Threat Timesen2026-10-14T03:41:52ZMicrosoft Windows Media Foundation Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-windows-error-reporting-flaw-allows/Threat Timesen2026-10-14T03:19:39ZCritical Windows Error Reporting Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-remote-code-execution-3/Threat Timesen2026-10-14T03:19:39ZMicrosoft Confirms Critical Remote Code Execution Flaw in Windows Error Reportinghttps://threattimes.com/category/vulnerabilities/oss-security-mailing-list-cve-2026-74580-linux/Threat Timesen2026-10-14T03:11:20ZVghost Flaw in Linux vhost Allows Local Privilege Escalation and VM Escapehttps://threattimes.com/category/tech/google-play-store-adds-personal-library-for-ai/Threat Timesen2026-10-14T03:11:00ZGoogle Play Store adds personal library for AI-generated Android appshttps://threattimes.com/category/vulnerabilities/microsoft-discloses-critical-remote-code/Threat Timesen2026-10-14T03:02:38ZMicrosoft Discloses Critical Remote Code Execution Flaw in Windows CCFFilter Driverhttps://threattimes.com/category/vulnerabilities/microsoft-documents-critical-windows-shell-remote/Threat Timesen2026-10-14T03:02:38ZMicrosoft Documents Critical Windows Shell Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-sql-injection-flaw-in-tyche/Threat Timesen2026-10-14T02:42:07ZAbandoned Cart Pro Plugin Vulnerable to Critical SQL Injection Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-unrestricted-file-upload-flaw-3/Threat Timesen2026-10-14T02:42:07ZSnazzy Social Media Feed CVE-2026-110002: CVSS 9.8 Critical PHP Upload Flaw in v2.5https://threattimes.com/category/vulnerabilities/tyche-softwares-abandoned-cart-pro-for/Threat Timesen2026-10-14T02:42:07ZAbandoned Cart Pro Plugin Flaw Enables Full Account Takeover on WordPress Siteshttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-6/Threat Timesen2026-10-14T02:42:06ZCollabora Online Built-in CODE Server Flaw Exploited in Wildhttps://threattimes.com/category/vulnerabilities/microsoft-cve-2026-83862-windows-nlb-remote-code/Threat Timesen2026-10-14T02:38:52ZMicrosoft CVE-2026-83862: Windows NLB Remote Code Execution Flaw Rated Criticalhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-dns-server-flaw/Threat Timesen2026-10-14T02:38:52ZMicrosoft Confirms Critical DNS Server Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-remote-code-execution-2/Threat Timesen2026-10-14T02:26:11ZMicrosoft Confirms Critical Remote Code Execution Flaw in PPP EAP-TLS Protocolhttps://threattimes.com/category/vulnerabilities/microsoft-nps-remote-code-execution-flaw-rated/Threat Timesen2026-10-14T02:01:05ZMicrosoft NPS Remote Code Execution Flaw Rated Criticalhttps://threattimes.com/category/vulnerabilities/microsoft-windows-media-foundation-has-critical/Threat Timesen2026-10-14T02:00:44ZMicrosoft Windows Media Foundation Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-remote-code-execution-2/Threat Timesen2026-10-14T02:00:44ZMicrosoft warns of critical remote code execution flaw in Windows RRAShttps://threattimes.com/category/vulnerabilities/samsung-open-source-qa-board-os-command-injection/Threat Timesen2026-10-14T01:55:53ZSamsung Open Source QA-Board Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/microsoft-advises-on-critical-windows-schannel/Threat Timesen2026-10-14T01:38:50ZMicrosoft Advises on Critical Windows Schannel Spoofing Vulnerability CVE-2026-85818https://threattimes.com/category/vulnerabilities/microsoft-windows-volume-manager-driver-has/Threat Timesen2026-10-14T01:38:50ZMicrosoft Windows Volume Manager Driver Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-click-to/Threat Timesen2026-10-14T01:31:45ZCritical Shortcode Execution Flaw Found in Click to Chat for WhatsApp Pluginhttps://threattimes.com/category/vulnerabilities/critical-severity-unrestricted-file-upload-flaw-2/Threat Timesen2026-10-14T01:31:45ZPrintcart Store Plugin Vulnerable to Critical Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-rce-flaw-in-windows/Threat Timesen2026-10-14T01:23:25ZMicrosoft Confirms Critical RCE Flaw in Windows Failover Clusterhttps://threattimes.com/category/vulnerabilities/microsoft-outlook-cve-2026-88156-rated-critical/Threat Timesen2026-10-14T01:23:25ZMicrosoft Outlook CVE-2026-88156 Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-remote-code-execution-flaw-found-in/Threat Timesen2026-10-14T01:00:54ZCritical Remote Code Execution Flaw Found in Microsoft Office PowerPointhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-remote-code-execution/Threat Timesen2026-10-14T01:00:38ZMicrosoft warns of critical remote code execution flaw in Windows DNS Serverhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-remote-code-execution/Threat Timesen2026-10-14T00:40:31ZMicrosoft Confirms Critical Remote Code Execution Flaw in Windows Media Playerhttps://threattimes.com/category/vulnerabilities/microsoft-lsass-flaw-cve-2026-96219-rated/Threat Timesen2026-10-14T00:40:31ZMicrosoft LSASS Flaw CVE-2026-96219 Rated Critical by NVD for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-october-patch-tuesday-fixes-1-415-flaws/Threat Timesen2026-10-14T00:37:45ZMicrosoft October Patch Tuesday Fixes 1,415 Flaws Including Exploited Shell Zero-Dayhttps://threattimes.com/category/vulnerabilities/microsoft-windows-dhcp-server-has-critical-remote/Threat Timesen2026-10-14T00:22:21ZMicrosoft Windows DHCP Server Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-double-free-flaw-in/Threat Timesen2026-10-14T00:20:56ZMicrosoft Warns of Critical Double Free Flaw in Failover Cluster Driverhttps://threattimes.com/category/vulnerabilities/microsoft-releases-1-413-patches-for-october-2026/Threat Timesen2026-10-14T00:20:41ZMicrosoft Releases 1,413 Patches for October 2026, Including Three Zero-Day Flawshttps://threattimes.com/category/ai/google-deepmind-releases-gemini-4-argon-for/Threat Timesen2026-10-13T23:48:38ZGoogle DeepMind Releases Gemini 4 Argon for Robotics Controlhttps://threattimes.com/category/ai/openai-engineer-arrested-for-planting-recording/Threat Timesen2026-10-13T22:56:42ZOpenAI engineer arrested for planting recording device in executive conference roomhttps://threattimes.com/category/vulnerabilities/actively-exploited-microsoft-windows-bug-cve-2026/Threat Timesen2026-10-13T22:37:46ZMicrosoft patches exploited Windows Shell zero-day CVE-2026-96951 in October updatehttps://threattimes.com/category/vulnerabilities/google-chrome-releases-extended-stable-update-for/Threat Timesen2026-10-13T21:53:08ZGoogle Deploys Chrome 155 and 152 Updates to Patch Multiple Critical Flawshttps://threattimes.com/category/vulnerabilities/microsoft-ad-fs-has-critical-spoofing-flaw-cve/Threat Timesen2026-10-13T21:23:14ZMicrosoft AD FS Has Critical Spoofing Flaw CVE-2026-96252https://threattimes.com/category/vulnerabilities/legacyupdate-flaw-cve-2026-97381-rated-cvss-9-9/Threat Timesen2026-10-13T21:19:22ZLegacy Update ActiveX Flaw Lets Attackers Install Updates and Restart PCshttps://threattimes.com/category/vulnerabilities/cisco-ucs-and-ucs-based-appliances-uefi-shell/Threat Timesen2026-10-13T21:06:09ZCisco Fixes UEFI Secure Boot Bypass in UCS Servers and Applianceshttps://threattimes.com/category/vulnerabilities/cve-2026-70035-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:56:52ZMicrosoft Patches High-Severity .NET Framework Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes-4/Threat Timesen2026-10-13T20:56:52ZMicrosoft patches high-severity deadlock flaw in ASP.NET Core Kestrelhttps://threattimes.com/category/vulnerabilities/cve-2026-96230-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:53:23ZMicrosoft Patches High-Severity Cross-Site Scripting Flaw in ASP.NET Core Blazor WebAssembly Serverhttps://threattimes.com/category/vulnerabilities/cve-2026-96225-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:53:23ZMicrosoft patches high-severity .NET symlink vulnerability on Linux and macOShttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-6/Threat Timesen2026-10-13T20:53:23ZMicrosoft patches high-severity .NET Framework out-of-bounds write flaw CVE-2026-70007https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-5/Threat Timesen2026-10-13T20:53:23ZMicrosoft .NET WPF Vulnerability CVE-2026-96224 Allows Remote Code Execution via Pixel Shadershttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-aspnetcore-2/Threat Timesen2026-10-13T20:53:23ZMicrosoft Patches High-Severity Privilege Escalation in ASP.NET Core Negotiate Authhttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-4/Threat Timesen2026-10-13T20:53:23ZMicrosoft Issues Patch for High-Severity .NET Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-sql-server-2017-gdr-heap-based-buffer/Threat Timesen2026-10-13T20:51:18ZMicrosoft SQL Server Faces High-Severity Heap Overflow Flaw in CVE-2026-94512https://threattimes.com/category/vulnerabilities/cve-2026-65674-insecure-deserialization-flaw-in/Threat Timesen2026-10-13T20:51:18ZMicrosoft SQL Server Faces High-Severity Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-96959-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:50:19ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-96959https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-3/Threat Timesen2026-10-13T20:50:19ZMicrosoft patches high severity out-of-bounds read flaw in .NET Windows Desktop runtimehttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-2/Threat Timesen2026-10-13T20:50:19ZMicrosoft patches high-severity .NET elevation of privilege flaw in Windows Desktop Runtimehttps://threattimes.com/category/vulnerabilities/microsoft-windowsdesktop-app-runtime-win-arm64/Threat Timesen2026-10-13T20:50:19ZMicrosoft Patches High-Severity .NET RCE Vulnerability CVE-2026-83520https://threattimes.com/category/vulnerabilities/cve-2026-70174-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:50:19ZMicrosoft Patches High-Severity .NET Remote Code Execution Flaw CVE-2026-70174https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop/Threat Timesen2026-10-13T20:47:17ZMicrosoft Patches High-Severity .NET WPF Remote Code Execution Flaw CVE-2026-96235https://threattimes.com/category/vulnerabilities/microsoft-netcore-app-runtime-linux-arm-fixes-2/Threat Timesen2026-10-13T20:47:17ZMicrosoft patches high-severity .NET privilege escalation flaw on Linux and macOShttps://threattimes.com/category/vulnerabilities/cve-2026-96222-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:47:17ZMicrosoft patches high-severity AD FS spoofing flaw in .NET crypto libraryhttps://threattimes.com/category/vulnerabilities/saudi-national-arrested-for-installing/Threat Timesen2026-10-13T20:47:17ZOpenAI Engineer Arrested for Planting Audio Bug in Executive Conference Roomhttps://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes-3/Threat Timesen2026-10-13T20:44:05ZMicrosoft Fixes Critical HTTP Request Smuggling Flaw in ASP.NET Corehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-input-validation-flaw-2/Threat Timesen2026-10-13T20:41:02ZAdobe ColdFusion Critical Flaw Allows Remote Code Execution Without User Interactionhttps://threattimes.com/category/vulnerabilities/cve-2026-85886-heap-based-buffer-overflow-flaw-in/Threat Timesen2026-10-13T20:41:02ZMicrosoft SQL Server Heap Overflow Allows Authenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-5/Threat Timesen2026-10-13T20:41:02ZMicrosoft Patches High-Severity CVE-2026-68883 Heap Overflow in SQL Server 2017-2022https://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-4/Threat Timesen2026-10-13T20:41:02ZMicrosoft SQL Server Heap Overflow Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-sql-server-2017-gdr-stack-based-buffer/Threat Timesen2026-10-13T20:41:02ZMicrosoft SQL Server Has High-Severity Privilege Escalation Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-106624-code-injection-flaw-in-adobe/Threat Timesen2026-10-13T20:41:02ZAdobe ColdFusion 2023 and 2025 face critical zero-click code injection flawhttps://threattimes.com/category/vulnerabilities/critical-severity-server-side-request-forgery-2/Threat Timesen2026-10-13T20:41:02ZAdobe ColdFusion Faces Critical SSRF Flaw Allowing Unauthenticated Privilege Escalationhttps://threattimes.com/category/vulnerabilities/cve-2026-70188-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:41:02ZMicrosoft patches critical HTTP smuggling flaw in ASP.NET Core Kestrelhttps://threattimes.com/category/vulnerabilities/cve-2026-96236-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:37:36ZMicrosoft patches high-severity denial-of-service flaw in ASP.NET Core localizationhttps://threattimes.com/category/vulnerabilities/cve-2026-70197-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:37:36ZMicrosoft Patches .NET Out-of-Bounds Write Flaw in System.Net.Socketshttps://threattimes.com/category/ai/google-rolls-out-gemini-4-argon-with-new-frontier/Threat Timesen2026-10-13T20:36:48ZGoogle Rolls Out Gemini 4 Argon With New Frontier Safety Guardrailshttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-netcore-app/Threat Timesen2026-10-13T20:34:37ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-69651https://threattimes.com/category/vulnerabilities/system-security-cryptography-xml-fixes-high/Threat Timesen2026-10-13T20:27:50ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-96960https://threattimes.com/category/vulnerabilities/cve-2026-96233-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:27:50ZMicrosoft patches high-severity denial-of-service flaw in .NET Core runtimehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-access-control-flaw-in/Threat Timesen2026-10-13T20:23:03ZCritical gRPC Access Control Bypass Found in IBM WebSphere Libertyhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-ibm-websphere/Threat Timesen2026-10-13T20:23:03ZIBM WebSphere Liberty Faces Critical Authentication Bypass in SAML Featurehttps://threattimes.com/category/vulnerabilities/xorbitsai-xoscar-insecure-deserialization-flaw/Threat Timesen2026-10-13T20:23:03ZXorbits Xoscar 0.11.2 Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-path-traversal-flaw-in-adobe/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Critical Path Traversal Flaw Exposes Sensitive Fileshttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-adobe-2/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Faces Critical Code Injection Flaw CVE-2026-106621https://threattimes.com/category/vulnerabilities/adobe-coldfusion-2025-unrestricted-file-upload/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Critical Upload Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in-4/Threat Timesen2026-10-13T20:23:03ZCritical ColdFusion Auth Flaw Allows Arbitrary Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-106620-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T20:23:03ZCritical ColdFusion Auth Bypass Grants Write Access to Low-Privilege Attackershttps://threattimes.com/category/vulnerabilities/cve-2026-75994-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Faces Critical Auth Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-adobe/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Critical Code Injection Flaw Allows Remote Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-96958-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:09:15ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-96958https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-system-security/Threat Timesen2026-10-13T20:05:49ZMicrosoft Patches High-Severity .NET Denial of Service Flaw CVE-2026-84008https://threattimes.com/category/vulnerabilities/microsoft-netcore-app-runtime-linux-arm-fixes/Threat Timesen2026-10-13T20:02:53ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-58280https://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes-2/Threat Timesen2026-10-13T20:02:53ZMicrosoft Patches Race Condition in ASP.NET Core to Fix Privilege Escalationhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-microsoft-native-quic/Threat Timesen2026-10-13T19:59:20ZMicrosoft patches critical QUIC remote code execution flaw in .NET packageshttps://threattimes.com/category/vulnerabilities/microsoft-365-apps-for-enterprise-heap-based-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft Office Access Heap Overflow Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-3/Threat Timesen2026-10-13T19:56:09ZMicrosoft Office Access Heap Overflow Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/high-severity-code-injection-flaw-in-microsoft-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft Fixes High-Severity Code Injection in Visual Studio Toolshttps://threattimes.com/category/vulnerabilities/microsoft-visual-studio-code-flaw-cve-2026-102235/Threat Timesen2026-10-13T19:56:09ZVisual Studio Code Patch Fixes High-Severity Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-70098-missing-authorization-flaw-in/Threat Timesen2026-10-13T19:56:09ZVisual Studio Code Patch Fixes High-Severity Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-102855-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-13T19:56:09ZMicrosoft Office Visio Heap Overflow Allows Unauthenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-sharepoint-server-subscription-edition-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Missing Authorization Flaw Allows Remote Privilege Escalationhttps://threattimes.com/category/vulnerabilities/cve-2026-102860-improper-access-control-flaw-in/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Server Has High-Severity Privilege Escalation Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-102858-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-13T19:56:09ZMicrosoft OneNote Heap Buffer Overflow Vulnerability Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-2/Threat Timesen2026-10-13T19:56:09ZHigh-Severity Heap-Based Buffer Overflow Flaw in Microsoft 365 Apps for Enterprise Tracked as CVE-2026-102857https://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in/Threat Timesen2026-10-13T19:56:09ZMicrosoft Visio Flaw CVE-2026-102856 Allows Remote Code Execution via Heap Overflowhttps://threattimes.com/category/vulnerabilities/microsoft-sharepoint-server-subscription-edition/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Has High-Severity Privilege Escalation Flaw CVE-2026-102866https://threattimes.com/category/vulnerabilities/cve-2026-102863-code-injection-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Code Injection Flaw CVE-2026-102863 Rated High Severityhttps://threattimes.com/category/vulnerabilities/high-severity-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Flaw CVE-2026-102862 Allows Authorized Users to Elevate Privilegeshttps://threattimes.com/category/vulnerabilities/high-severity-code-injection-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Fixes Code Injection Flaw in ASP.NET Core Debuggerhttps://threattimes.com/category/vulnerabilities/cve-2026-100212-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Excel Use-After-Free Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-100211-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Excel Use-After-Free Flaw CVE-2026-100211 Rated High Severityhttps://threattimes.com/category/vulnerabilities/microsoft-365-apps-for-enterprise-heap-based/Threat Timesen2026-10-13T19:56:09ZMicrosoft Rates Excel Heap Overflow as High Severity in Latest Advisoryhttps://threattimes.com/category/vulnerabilities/high-severity-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Excel Use-After-Free Flaw CVE-2026-100209 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1607-heap-based/Threat Timesen2026-10-13T19:56:09ZMicrosoft Windows Media Video Decoder Buffer Overflow Rated High Severityhttps://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1607-use-after-free-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft Remote Desktop Gateway Use-After-Free Flaw Rated High Severityhttps://threattimes.com/category/vulnerabilities/microsoft-dynamics-nav-2017-insecure/Threat Timesen2026-10-13T19:56:09ZMicrosoft Dynamics NAV Flaw CVE-2026-100214 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-102203-type-confusion-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft RPC Runtime Flaw CVE-2026-102203 Enables Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-102214-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Addresses High-Severity Hyper-V Use-After-Free Flaw in Windowshttps://threattimes.com/category/vulnerabilities/cve-2026-102869-type-confusion-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102869 Type Confusion Flaw in .NET and Visual Studio Enables Privilege Elevationhttps://threattimes.com/category/vulnerabilities/microsoft-dynamics-nav-2018-path-traversal-flaw/Threat Timesen2026-10-13T19:56:09ZMicrosoft Dynamics NAV 2018 Path Traversal Flaw Rated High Severityhttps://threattimes.com/category/vulnerabilities/cve-2026-102225-out-of-bounds-read-flaw-in/Threat Timesen2026-10-13T19:56:09ZWindows Text Shaping Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-102217-flaw-in-microsoft-windows-10/Threat Timesen2026-10-13T19:56:09ZMicrosoft WebDAV Path Flaw Allows Network Privilege Escalationhttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-aspnetcore/Threat Timesen2026-10-13T19:56:09ZMicrosoft Patches High-Severity SignalR Denial of Service Flaw CVE-2026-70159https://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes/Threat Timesen2026-10-13T19:56:09ZMicrosoft patches high-severity ASP.NET Core privilege escalation flaw CVE-2026-70175https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-aspnetcore-app/Threat Timesen2026-10-13T19:56:09ZMicrosoft patches high-severity ASP.NET Core denial of service flaw CVE-2026-70181https://threattimes.com/category/vulnerabilities/zero-day-initiative-zdi-26-754-0day-genesis-world/Threat Timesen2026-10-13T19:56:09ZZDI Discloses Three Unpatched Genesis World Flaws Including Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-63158-flaw-in-omnispace-agora-project/Threat Timesen2026-10-13T19:54:53ZOmnispace Agora Project Authentication Bypass Allows Hash Replay Attackshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-omnispace-agora-project-2/Threat Timesen2026-10-13T19:54:53ZOmnispace Agora Project Vulnerability Allows Account Takeover via Predictable Tokenshttps://threattimes.com/category/vulnerabilities/cve-2026-63160-flaw-in-omnispace-agora-project/Threat Timesen2026-10-13T19:54:53ZOmnispace Agora Project Critical Flaw Exposes Plaintext Auth Tokenshttps://threattimes.com/category/vulnerabilities/omnispace-agora-project-code-injection-flaw-cve/Threat Timesen2026-10-13T19:43:46ZAgora Project Flaw Allows Unauthenticated Remote Code Execution Before Version 26.10.0https://threattimes.com/category/vulnerabilities/critical-severity-improper-input-validation-flaw/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Faces Critical CVE-2026-106626 Code Execution Riskhttps://threattimes.com/category/vulnerabilities/cve-2026-106629-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Has Critical Stored XSS Flaw CVE-2026-106629https://threattimes.com/category/vulnerabilities/cve-2026-106630-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Faces Critical Stored XSS Flaw CVE-2026-106630https://threattimes.com/category/vulnerabilities/cve-2026-83662-cross-site-scripting-flaw-in-adobe/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Critical XSS Flaw CVE-2026-83662 Requires User Interactionhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-omnispace-agora-project/Threat Timesen2026-10-13T19:43:46ZOmnispace Agora Project Has Critical Password Prediction Flaw Before 26.10.0https://threattimes.com/category/vulnerabilities/cve-2026-103848-os-command-injection-flaw-in/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Faces Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/adobe-experience-manager-6-5-improper-input/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Critical Flaw Allows Code Execution Without User Interactionhttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in-3/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Faces Critical Authorization Flaw Allowing Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-48383-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Faces Critical Authorization Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in-2/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Vulnerability Allows Code Execution Without Interactionhttps://threattimes.com/category/vulnerabilities/critical-severity-xml-external-entity-flaw-in/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager XXE Flaw CVE-2026-90531 Allows Privilege Escalationhttps://threattimes.com/category/vulnerabilities/cve-2026-90532-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Has Critical Authorization Flaw CVE-2026-90532https://threattimes.com/category/vulnerabilities/cve-2026-104252-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T19:38:00ZVitess Fixes Critical Cross-Site Scripting Flaw in Debug Endpointshttps://threattimes.com/category/vulnerabilities/cert-cc-vu-456950-komodo-periphery-agent-contains/Threat Timesen2026-10-13T19:31:07ZKomodo Periphery Agent Patch Fixes Root Command Injection Flawhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-382143-lowcoder-query-library-api/Threat Timesen2026-10-13T19:27:49ZCERT/CC: VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltrationhttps://threattimes.com/category/vulnerabilities/cve-2026-102238-path-traversal-flaw-in-microsoft/Threat Timesen2026-10-13T19:25:53ZVisual Studio Code Path Traversal Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/oss-security-mailing-list-xen-security-advisory/Threat Timesen2026-10-13T19:14:57ZXen and Citrix Address Multiple Vulnerabilities in Latest Security Advisorieshttps://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1607-use-after-free/Threat Timesen2026-10-13T19:14:57ZMicrosoft Windows Message Queuing Flaw Allows Critical Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-100222-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-13T19:14:57ZMicrosoft NPS Heap Overflow Allows Remote Code Execution on Windowshttps://threattimes.com/category/vulnerabilities/cve-2026-100219-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:14:57ZMicrosoft QUIC Use-After-Free Flaw Rated Critical 9.8 on Windows 11https://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1809-heap-based/Threat Timesen2026-10-13T19:14:57ZWindows Text Shaping Buffer Overflow Allows Remote Code Executionhttps://threattimes.com/category/tech/apple-seeds-fourth-ios-27-2-and-macos-golden-gate/Threat Timesen2026-10-13T18:37:21ZApple Seeds Fourth iOS 27.2 and macOS Golden Gate 27.2 Developer Betashttps://threattimes.com/category/vulnerabilities/cert-cc-vu-573195-go-openssl-apple-libressl-pyca/Threat Timesen2026-10-13T18:34:32ZCERT/CC Flags Name-Constraint Inconsistencies in Go, OpenSSL, and Other TLS Librarieshttps://threattimes.com/category/vulnerabilities/opentext-endpoint-investigator-flaw-cve-2026/Threat Timesen2026-10-13T18:32:15ZOpenText EnCase Agents Vulnerable to Unauthorized Activity in CVE-2026-75120https://threattimes.com/category/vulnerabilities/cve-2026-100133-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce and Magento Open Source Hit by Critical Stored XSS Flawhttps://threattimes.com/category/vulnerabilities/adobe-commerce-improper-input-validation-flaw-cve/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce Critical Flaw CVE-2026-92464 Enables Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce, Magento Open Source Hit by Critical Stored XSS Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-92909-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce, Magento Open Source Hit by Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-103849-flaw-in-adobe-commerce-scores-10/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce Critical Vulnerability Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-157374-xss-vulnerability-in-shopware-6/Threat Timesen2026-10-13T18:22:03ZShopware 6.7 XSS Flaw Allows Admin Token Theft and Remote Code Executionhttps://threattimes.com/category/tech/meta-launches-audio-only-ray-ban-glasses-without/Threat Timesen2026-10-13T18:19:33ZMeta Launches Audio-Only Ray-Ban Glasses Without Cameras to Address Privacy Concernshttps://threattimes.com/category/tech/github-deploys-context-aware-model-to-cut-secret/Threat Timesen2026-10-13T18:19:33ZGitHub Deploys Context-Aware Model to Cut Secret Scan Time by 86 Percenthttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-jfrog-cli-tracked-as/Threat Timesen2026-10-13T17:58:28ZCritical Code Execution Flaw Found in JFrog CLI Through Version 2.126.0https://threattimes.com/category/vulnerabilities/fortiguard-psirt-arbitrary-command-execution-in/Threat Timesen2026-10-13T17:48:30ZFortiManager Daemon Vulnerability Allows Remote Code Execution via Cluster Impersonationhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-sql-command-injection-in-webmail/Threat Timesen2026-10-13T17:48:30ZFortiGuard Revises FortiMail SQLi Advisory: Authenticated Attackers Can Execute Code via Webmailhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-persistent-denial-of-service-in/Threat Timesen2026-10-13T17:48:30ZFortinet FortiSandbox Flaw Allows Persistent GUI and CLI Denial of Servicehttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-improper-access-control-and/Threat Timesen2026-10-13T17:48:30ZFortiSandbox GUI Bypass Flaw Rated 9.6 Allows Unauthenticated Accesshttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-html-injection-in-webui/Threat Timesen2026-10-13T17:48:30ZFortinet Fixes HTML Injection Flaw in FortiManager and FortiAnalyzer Web Interfaceshttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-gui-denial-of-service/Threat Timesen2026-10-13T17:48:30ZFortiNet GUI Denial of Service Vulnerability Discovered in FortiOShttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-fabric-api-authentication-bypass/Threat Timesen2026-10-13T17:48:30ZFortiGuard alerts on Fabric API auth bypass in FortiSandbox with CVSS 4.9 scorehttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-double-free-in-signal-handler/Threat Timesen2026-10-13T17:48:30ZFortinet revises advisory for low-severity double free flaw in FortiOS, FortiProxy and FortiSwitchhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-broken-authorization/Threat Timesen2026-10-13T17:48:30ZFortiSIEM GUI Authorization Flaw Allows Unauthorized Code Executionhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-arbitrary-file-write-in-grpc/Threat Timesen2026-10-13T17:48:30ZFortiSIEM path traversal flaw allows unauthenticated code executionhttps://threattimes.com/category/vulnerabilities/fortinet-fortisiem-path-traversal-flaw-cve-2026/Threat Timesen2026-10-13T17:47:18ZFortinet FortiSIEM 7.5.0 Has Critical Path Traversal Flawhttps://threattimes.com/category/tech/tfg-london-cyberattack-disrupts-it-systems-for/Threat Timesen2026-10-13T17:45:30ZTFG London Cyberattack Disrupts IT Systems for Hobbs, Whistles, and Phase Eighthttps://threattimes.com/category/data-breaches/meta-hackers-stole-code-and-data-of-1-500-via/Threat Timesen2026-10-13T17:32:44ZMeta Hackers Stole Code and Data of 1,500 via GitHub Reposhttps://threattimes.com/category/tech/g2a-com-data-shows-antivirus-sales-surge-35-year/Threat Timesen2026-10-13T17:28:08ZG2A.COM Data Shows Antivirus Sales Surge 35% Year-Over-Yearhttps://threattimes.com/category/tech/google-play-adds-private-distribution-for-ai/Threat Timesen2026-10-13T17:28:08ZGoogle Play adds private distribution for AI-generated personal Android appshttps://threattimes.com/category/vulnerabilities/risesoft-y9-digital-infrastructure-path-traversal/Threat Timesen2026-10-13T17:24:17ZRisesoft-y9 Digital-Infrastructure Has High-Severity Unauthenticated Path Traversal Flawhttps://threattimes.com/category/vulnerabilities/docker-hub-critical-flaw-allowed-token-based-user/Threat Timesen2026-10-13T17:11:14ZDocker Hub Critical Flaw Allowed Token-Based User Impersonationhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-podman-container-tools/Threat Timesen2026-10-13T17:02:20ZCritical Podman Flaw Bypasses Security Restrictions via Image Annotationshttps://threattimes.com/category/ai/google-gemini-4-argon-launches-in-app-for-pro-and/Threat Timesen2026-10-13T16:54:48ZGoogle Gemini 4 Argon Launches in App for Pro and Ultra Subscribershttps://threattimes.com/category/ai/google-opens-gemini-4-argon-api-access-for/Threat Timesen2026-10-13T16:40:52ZGoogle Opens Gemini 4 Argon API Access for Developers and Enterprise Usershttps://threattimes.com/category/vulnerabilities/cve-2026-55562-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T16:38:02ZCritical Stored XSS in Cronicle Task Scheduler Allows Admin Account Takeoverhttps://threattimes.com/category/vulnerabilities/cve-2026-54454-unrestricted-file-upload-flaw-in/Threat Timesen2026-10-13T16:38:02ZOpenCATS Patch Fixes Critical RCE Flaw in Import Modulehttps://threattimes.com/category/vulnerabilities/zarestia-dev-rclone-manager-missing/Threat Timesen2026-10-13T16:38:02ZRClone Manager Fixes Critical Local API Flaw in Version 0.2.7https://threattimes.com/category/vulnerabilities/ivanti-neurons-patch-for-intune-flaw-cve-2026/Threat Timesen2026-10-13T16:38:02ZCritical Flaw in Ivanti Neurons Patch for Intune Exposes Authentication Datahttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T16:38:02ZArgo CD Patched Critical Auth Bypass in PostDelete Hookshttps://threattimes.com/category/ai/google-launches-gemini-4-argon-model-for/Threat Timesen2026-10-13T16:27:30ZGoogle Launches Gemini 4 Argon Model for Developers and Enterpriseshttps://threattimes.com/category/ai/google-rolls-out-gemini-4-argon-to-paying-ai-pro/Threat Timesen2026-10-13T16:27:30ZGoogle Rolls Out Gemini 4 Argon to Paying AI Pro and Ultra Usershttps://threattimes.com/category/vulnerabilities/tanstack-router-cross-site-scripting-flaw-cve/Threat Timesen2026-10-13T16:20:04ZTanStack Router Critical Cross-Site Scripting Flaw Fixed in Latest Versionshttps://threattimes.com/category/vulnerabilities/esri-portal-for-arcgis-missing-authentication/Threat Timesen2026-10-13T16:20:04ZCritical Auth Bypass Flaw Found in Esri Portal for ArcGIShttps://threattimes.com/category/vulnerabilities/ivanti-xtraction-flaw-cve-2026-106042-rated-cvss/Threat Timesen2026-10-13T16:20:04ZIvanti Xtraction Critical Flaw Allows Credential Theft Before 2026.4https://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-2/Threat Timesen2026-10-13T16:03:07ZFearlessCMS 0.1.2b Patch Fixes Critical RCE Flaw in Update Mechanismhttps://threattimes.com/category/vulnerabilities/hackers-use-citrix-netscaler-zero-days-to-install/Threat Timesen2026-10-13T15:59:17ZHackers Use Citrix NetScaler Zero-Days to Install Platypus Backdoorhttps://threattimes.com/category/tech/samsung-android-xr-glasses-leak-reveals-25-styles/Threat Timesen2026-10-13T15:59:17ZSamsung Android XR Glasses Leak Reveals 25 Styles, 9-Hour Battery Lifehttps://threattimes.com/category/vulnerabilities/cve-2026-104935-flaw-in-ivanti-connect-secure/Threat Timesen2026-10-13T15:58:14ZIvanti Connect Secure Zero-Day CVE-2026-104935 Actively Exploitedhttps://threattimes.com/category/tech/apple-launches-homeview-and-seven-smart-home/Threat Timesen2026-10-13T15:58:02ZApple Launches HomeView and Seven Smart Home Devices at Welcome Home Eventhttps://threattimes.com/category/vulnerabilities/cve-2026-103928-flaw-in-metabase-scores-9-3-on/Threat Timesen2026-10-13T15:52:04ZFortinet SQL Injection Flaw Rated High Severity in October 2026 Advisoryhttps://threattimes.com/category/vulnerabilities/saltyorg-docs-code-injection-flaw-cve-2026-55675/Threat Timesen2026-10-13T15:22:32ZSaltStack Docs Repo CVE-2026-55675 Allows Fork-Based Secret Thefthttps://threattimes.com/category/data-breaches/attacker-used-123456-password-to-breach-denmarks/Threat Timesen2026-10-13T15:15:33ZAttacker Used '123456' Password to Breach Denmark's National Registryhttps://threattimes.com/category/tech/apple-brings-siri-ai-to-older-apple-tv-4k-models/Threat Timesen2026-10-13T15:15:33ZApple Brings Siri AI to Older Apple TV 4K Models, Not Just New Gen 4https://threattimes.com/category/tech/apple-homeview-hub-launches-with-siri-ai-and/Threat Timesen2026-10-13T15:15:33ZApple HomeView Hub Launches with Siri AI and Matter Supporthttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-2/Threat Timesen2026-10-13T14:47:22ZIBM MCP Context Forge Patch Fixes Critical Unauthenticated Admin Accesshttps://threattimes.com/category/vulnerabilities/dragonflydb-dragonfly-flaw-cve-2026-104192-rated/Threat Timesen2026-10-13T14:47:22ZDragonfly DB Critical Double-Free Flaw Allows Unauthenticated Code Executionhttps://threattimes.com/category/vulnerabilities/ivanti-october-2026-security-update/Threat Timesen2026-10-13T14:35:37ZIvanti Confirms Wild Exploitation of Connect Secure Vulnerability in October 2026 Updatehttps://threattimes.com/category/vulnerabilities/cve-2026-77099-flaw-in-commvault-cloud-scores-9-3/Threat Timesen2026-10-13T14:30:12ZCVE-2026-77099: Flaw in Commvault Cloud Scores 9.3 on CVSShttps://threattimes.com/category/vulnerabilities/high-severity-path-traversal-flaw-in-wazuh/Threat Timesen2026-10-13T14:21:50ZWazuh Cluster Workers Write Anywhere via Path Traversal Bypassing REST Validation in Pre-4.14.8 Versionshttps://threattimes.com/category/threat-intel/criminal-ip-to-demonstrate-threat-intel-and/Threat Timesen2026-10-13T14:20:12ZCriminal IP to Demonstrate Threat Intel and Exposure Tools at Tokyo Security Dayshttps://threattimes.com/category/cyber-attacks/tenable-ai-and-iran-linked-groups-heighten-risk/Threat Timesen2026-10-13T14:10:45ZTenable: AI and Iran-linked groups heighten risk to critical infrastructurehttps://threattimes.com/category/tech/xandr-fined-9-6-million-for-sharing-grindr-user/Threat Timesen2026-10-13T14:10:45ZXandr fined $9.6 million for sharing Grindr user data without valid consenthttps://threattimes.com/category/vulnerabilities/colorful-igamecenter-flaw-cve-2026-109520-rated/Threat Timesen2026-10-13T14:07:40ZColorful iGameCenter Flaw (CVE-2026-109520) Rated CVSS 9.3https://threattimes.com/category/tech/apple-tv-4k-4th-gen-adds-far-field-microphones/Threat Timesen2026-10-13T14:05:31ZApple TV 4K 4th Gen Adds Far-Field Microphones, Siri AI, and Find My Remotehttps://threattimes.com/category/vulnerabilities/linksys-e1700-os-command-injection-flaw-cve-2026-2/Threat Timesen2026-10-13T13:58:51ZLinksys E1700 Router Has Critical Remote Command Injection Flawhttps://threattimes.com/category/ai/trellix-launches-private-cloud-ai-security/Threat Timesen2026-10-13T13:52:14ZTrellix launches private cloud AI security operations platformhttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authorization-flaw-in/Threat Timesen2026-10-13T13:39:45ZWazuh Critical Flaw Allows Cluster Workers to Overwrite Master Config Fileshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-wazuh-manager-tracked/Threat Timesen2026-10-13T13:39:45ZCritical Wazuh Flaw Lets Authenticated Users Run Root Commands via Config Bypasshttps://threattimes.com/category/tech/carl-pei-iphone-duo-lacks-telephoto-face-id-and/Threat Timesen2026-10-13T13:23:46ZCarl Pei: iPhone Duo lacks telephoto, Face ID and selfie quality for $2k pricehttps://threattimes.com/category/tech/apple-launches-homeview-smart-display-with-siri/Threat Timesen2026-10-13T13:23:13ZApple Launches HomeView Smart Display with Siri AI and Matter Supporthttps://threattimes.com/category/tech/apple-launches-home-collection-with-lg-and/Threat Timesen2026-10-13T13:18:22ZApple Launches Home Collection with LG and Schneider for Smart Home Securityhttps://threattimes.com/category/tech/apple-homepod-mini-2-launches-with-s10-chip-siri/Threat Timesen2026-10-13T13:18:22ZApple HomePod Mini 2 Launches With S10 Chip, Siri AI Delayedhttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authentication-flaw-in-2/Threat Timesen2026-10-13T13:10:43ZNVIDIA AIStore Critical Vulnerability Allows Unauthenticated Token Revocationhttps://threattimes.com/category/vulnerabilities/nvidia-aistore-framework-flaw-cve-2026-65162/Threat Timesen2026-10-13T13:10:43ZNVIDIA AIStore Flaw Allows Remote Code Execution in Kuberneteshttps://threattimes.com/category/tech/nvidia-rtx-spark-laptops-launch-oct-16-with-local/Threat Timesen2026-10-13T12:43:03ZNVIDIA RTX Spark laptops launch Oct. 16 with local AI agent ecosystemhttps://threattimes.com/category/tech/dutch-tax-authority-halts-microsoft-365-cloud/Threat Timesen2026-10-13T12:23:34ZDutch Tax Authority Halts Microsoft 365 Cloud Rollout for Open Source Shifthttps://threattimes.com/category/ai/anthropic-study-warns-small-ai-models-could-soon/Threat Timesen2026-10-13T12:11:48ZAnthropic Study Warns Small AI Models Could Soon Self-Replicate on IoT Deviceshttps://threattimes.com/category/tech/microsoft-launches-decision-1-model-for-automated/Threat Timesen2026-10-13T11:53:22ZMicrosoft Launches Decision-1 Model for Automated AI Classification Taskshttps://threattimes.com/category/cyber-attacks/moonlock-lab-discloses-ghostprofile-macos-malware/Threat Timesen2026-10-13T11:24:08ZMoonlock Lab discloses GhostProfile macOS malware that hides Chrome sessions to evade screen mirroring detectionhttps://threattimes.com/category/vulnerabilities/cve-2026-109157-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-13T10:54:26ZTRENDnet TEW-432BRP Router Has Critical Remote Buffer Overflow Flawhttps://threattimes.com/category/tech/peoples-bank-of-china-approves-visas-application/Threat Timesen2026-10-13T10:42:08ZPeople’s Bank of China Approves Visa’s Application to Prepare for Domestic Clearinghttps://threattimes.com/category/tech/mozilla-launches-self-hosted-firefox-enterprise/Threat Timesen2026-10-13T10:41:48ZMozilla launches self-hosted Firefox Enterprise for European firmshttps://threattimes.com/category/ai/iree-3-12-releases-rewritten-vulkan-driver-and/Threat Timesen2026-10-13T10:25:50ZIREE 3.12 Releases Rewritten Vulkan Driver and Experimental AMD HSA HALhttps://threattimes.com/category/vulnerabilities/bloom-security-finds-1-500-npm-packages/Threat Timesen2026-10-13T10:25:50ZBloom Security Finds 1,500 npm Packages Vulnerable to AI-Driven Supply Chain Attackshttps://threattimes.com/category/malware/kimsuky-deploys-funhouse-ransomware-via-quasar/Threat Timesen2026-10-13T10:25:50ZKimsuky Deploys Funhouse Ransomware via Quasar RAT and Hangul Documentshttps://threattimes.com/category/cyber-attacks/cyber-security-news-ranks-contrast-github/Threat Timesen2026-10-13T10:24:38ZCyber Security News ranks Contrast, GitHub Advanced Security top tools for 2026https://threattimes.com/category/ai/alibaba-launches-qwen-glasses-n1-and-clip-earbuds/Threat Timesen2026-10-13T10:24:38ZAlibaba Launches Qwen Glasses N1 and Clip Earbuds at $450 Starting Pricehttps://threattimes.com/category/tech/isaca-survey-shows-gender-discrimination-in-tech/Threat Timesen2026-10-13T10:12:56ZISACA Survey Shows Gender Discrimination in Tech Rises to 47 Percenthttps://threattimes.com/category/ai/pro-ai-super-pac-network-funnels-millions-to/Threat Timesen2026-10-13T10:12:16ZPro-AI Super PAC Network Funnels Millions to Nevada Shell Companieshttps://threattimes.com/category/tech/spacexsi-introduces-unified-x-subscription/Threat Timesen2026-10-13T10:12:16ZSpaceXSI Introduces Unified X Subscription Bundling Grok, Cursor, and Premiumhttps://threattimes.com/category/ai/meta-releases-zurp-toolkit-to-integrate-ai-agents/Threat Timesen2026-10-13T10:12:16ZMeta Releases Zurp Toolkit to Integrate AI Agents with Burp Suite for Bug Bounty Researchhttps://threattimes.com/category/tech/u-s-healthcare-groups-face-record-cyberattack/Threat Timesen2026-10-13T10:12:16ZU.S. Healthcare Groups Face Record Cyberattack Costs and Patient Care Disruptionhttps://threattimes.com/category/tech/tfg-london-cyberattack-disrupts-hobbs-whistles-it/Threat Timesen2026-10-13T10:05:23ZTFG London cyberattack disrupts Hobbs, Whistles IT systemshttps://threattimes.com/category/ai/uk-government-to-use-frontier-ai-to-find/Threat Timesen2026-10-13T10:05:23ZUK Government to Use Frontier AI to Find Vulnerabilities in Public Systemshttps://threattimes.com/category/vulnerabilities/public-exploit-grants-root-access-and-bootloader/Threat Timesen2026-10-13T10:05:23ZPublic Exploit Grants Root Access and Bootloader Unlock on Amazon Fire TV Cube 3https://threattimes.com/category/ai/chinese-firms-buy-1m-nvidia-gaming-chips-for-ai/Threat Timesen2026-10-13T10:05:23ZChinese firms buy 1M Nvidia gaming chips for AI workloads amid shortagehttps://threattimes.com/category/data-breaches/uk-minister-warns-ai-agents-will-likely-breach/Threat Timesen2026-10-13T10:05:23ZUK minister warns AI agents will likely breach national cyber defenseshttps://threattimes.com/category/ai/pax8-survey-finds-two-thirds-of-smbs-building/Threat Timesen2026-10-13T10:03:58ZPax8 Survey Finds Two-Thirds of SMBs Building Custom AI Toolshttps://threattimes.com/category/tech/amazon-updates-kindle-lineup-with-new-aluminum/Threat Timesen2026-10-13T09:51:15ZAmazon Updates Kindle Lineup With New Aluminum Models and Color Optionshttps://threattimes.com/category/ai/atlassian-ceo-confirms-no-chinese-ai-models-in/Threat Timesen2026-10-13T09:37:07ZAtlassian CEO confirms no Chinese AI models in production systemshttps://threattimes.com/category/ai/naboo-rebrands-to-target-procurement-teams-claims/Threat Timesen2026-10-13T09:37:07ZNaboo rebrands to target procurement teams, claims AI cuts event costshttps://threattimes.com/category/tech/doyensec-chains-sfape-dll-flaws-to-break-windows/Threat Timesen2026-10-13T09:37:06ZDoyensec Chains SFAPE.dll Flaws to Break Windows Isolated User Modehttps://threattimes.com/category/vulnerabilities/cve-2026-44415-flaw-in-siemens-industrial-edge/Threat Timesen2026-10-13T09:35:53ZSiemens Industrial Edge Device Kit Flaw Allows Unauthorized Internal API Accesshttps://threattimes.com/category/vulnerabilities/cve-2026-63350-flaw-in-siemens-simatic-drive/Threat Timesen2026-10-13T09:35:53ZSiemens SIMATIC CPUs face critical web server code execution flawhttps://threattimes.com/category/vulnerabilities/cve-2026-63353-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T09:35:53ZSiemens Drive Controllers Have Critical Cross-Site Scripting Flawhttps://threattimes.com/category/vulnerabilities/siemens-simatic-drive-controller-cpu-1504d-tf/Threat Timesen2026-10-13T09:35:53ZSiemens Drive Controllers Face Critical Cross-Site Scripting Flaw in CSV Importhttps://threattimes.com/category/vulnerabilities/one-in-five-cisos-skip-patch-tuesday-to-avoid/Threat Timesen2026-10-13T09:24:40ZOne-in-five CISOs skip Patch Tuesday to avoid burnout, says Socurahttps://threattimes.com/category/vulnerabilities/github-fixes-npm-trusted-publishing-flaw-exposing/Threat Timesen2026-10-13T09:24:40ZGitHub Fixes npm Trusted Publishing Flaw Exposing 1,500 Packages to Takeoverhttps://threattimes.com/category/ai/character-ai-files-chapter-11-bankruptcy-as/Threat Timesen2026-10-13T09:24:40ZCharacter.ai Files Chapter 11 Bankruptcy as Disney Leads Asset Bidhttps://threattimes.com/category/cyber-attacks/fake-web3-accelerator-distributes-malicious-npm/Threat Timesen2026-10-13T09:24:40ZFake Web3 Accelerator Distributes Malicious npm Packages to Steal Datahttps://threattimes.com/category/cyber-attacks/malwarebytes-labs-warns-that-replying-to-scam/Threat Timesen2026-10-13T09:20:43ZMalwarebytes Labs warns that replying to scam texts validates active numbershttps://threattimes.com/category/cloud-security/microsoft-reshapes-azure-leadership-expands-maia/Threat Timesen2026-10-13T09:09:19ZMicrosoft reshapes Azure leadership, expands Maia chip rolehttps://threattimes.com/category/ai/ai-summaries-now-define-online-reputation-for/Threat Timesen2026-10-13T09:09:19ZAI Summaries Now Define Online Reputation for Billions of Usershttps://threattimes.com/category/tech/cmf-by-nothing-launches-milk-carton-shaped/Threat Timesen2026-10-13T08:52:48ZCMF by Nothing launches milk carton-shaped Speaker S and Speaker Mhttps://threattimes.com/category/cyber-attacks/gta-6-leaker-threatens-full-release-if-crypto/Threat Timesen2026-10-13T08:43:06ZGTA 6 Leaker Threatens Full Release If Crypto Token Hits $30M Market Caphttps://threattimes.com/category/malware/kimsuky-uses-github-infrastructure-for-operation/Threat Timesen2026-10-13T08:43:06ZKimsuky Uses GitHub Infrastructure for Operation GitPower Cyber Spying Campaignhttps://threattimes.com/category/cyber-attacks/european-supermarkets-hit-by-cyberattack/Threat Timesen2026-10-13T08:43:06ZEuropean Supermarkets Hit by Cyberattack Targeting Danfoss Refrigeration Controllershttps://threattimes.com/category/tech/apple-integrates-flexible-graphite-cooling-pipes/Threat Timesen2026-10-13T08:41:53ZApple integrates flexible graphite cooling pipes directly into iPhone Duo hingehttps://threattimes.com/category/ai/ntt-data-nears-deal-to-build-anthropics-first/Threat Timesen2026-10-13T08:32:55ZNTT Data nears deal to build Anthropic’s first Japan data centre in Osakahttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-5/Threat Timesen2026-10-13T08:19:53ZCritical OS Command Injection Flaw Found in Wavlink WL-WN592AX6 Router Firmwarehttps://threattimes.com/category/tech/wow-player-accuses-husband-of-deleting-mythic/Threat Timesen2026-10-13T08:18:40ZWoW player accuses husband of deleting Mythic+ gear in revenge for social outingshttps://threattimes.com/category/tech/dayone-secures-3-67-billion-in-financing-for/Threat Timesen2026-10-13T08:18:12ZDayOne Secures $3.67 Billion in Financing for Malaysia Data Center Expansionhttps://threattimes.com/category/cyber-attacks/us-embassy-in-fiji-links-chinese-hackers-to/Threat Timesen2026-10-13T08:07:31ZUS Embassy in Fiji Links Chinese Hackers to Breach of Regional Organizationhttps://threattimes.com/category/data-breaches/only-24-of-breach-notices-disclose-attack-vectors/Threat Timesen2026-10-13T08:07:31ZOnly 24% of Breach Notices Disclose Attack Vectors in H1 2026, Lowest Rate on Recordhttps://threattimes.com/category/vulnerabilities/wavlink-wl-wn530be1-a-stack-based-buffer-overflow/Threat Timesen2026-10-13T08:02:41ZCritical Remote Overflow in Wavlink Router Firmware Exposes Device to Exploitationhttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-4/Threat Timesen2026-10-13T07:39:29ZCVE-2026-109108: Public Code Enables Remote OS Command Injection in Wavlink WL-WN530BE1-A Firmwarehttps://threattimes.com/category/ai/home-office-asylum-ai-fails-accuracy-checks-in/Threat Timesen2026-10-13T07:36:21ZHome Office asylum AI fails accuracy checks in one of five summarieshttps://threattimes.com/category/ai/kevin-kellys-2016-ai-predictions-reviewed-against/Threat Timesen2026-10-13T07:29:50ZKevin Kelly’s 2016 AI Predictions Reviewed Against Current Industry Realityhttps://threattimes.com/category/ai/intel-details-d270-data-center-gpu-specs-with-480/Threat Timesen2026-10-13T07:29:50ZIntel Details D270 Data Center GPU Specs With 480 GB LPDDR5X Memoryhttps://threattimes.com/category/ai/research-shows-ai-models-can-provably-hide/Threat Timesen2026-10-13T07:29:50ZResearch Shows AI Models Can Provably Hide Arbitrary Capabilitieshttps://threattimes.com/category/tech/airconsole-partners-with-zeekr-for-in-car-gaming/Threat Timesen2026-10-13T07:29:50ZAirConsole Partners With Zeekr for In-Car Gaming Platform Rollouthttps://threattimes.com/category/tech/microsoft-surface-laptop-ultra-launches-with-1/Threat Timesen2026-10-13T07:20:07ZMicrosoft Surface Laptop Ultra launches with $1,000 cashback offer for MacBook ownershttps://threattimes.com/category/tech/october-2026-cybersecurity-hiring-trends-show/Threat Timesen2026-10-13T07:20:07ZOctober 2026 Cybersecurity Hiring Trends Show Demand for Cloud and App Sec Roleshttps://threattimes.com/category/ai/anthropic-warns-small-ai-models-may-self/Threat Timesen2026-10-13T07:20:07ZAnthropic Warns Small AI Models May Self-Replicate on Weak IoT Deviceshttps://threattimes.com/category/vulnerabilities/vmware-launches-hyperarmor-to-manage-ai/Threat Timesen2026-10-13T07:20:07ZVMware launches HyperArmor to manage AI-discovered flaws and enforce MFAhttps://threattimes.com/category/tech/broadcom-launches-vmware-hyperarmor-to-shield/Threat Timesen2026-10-13T07:12:16ZBroadcom Launches VMware HyperArmor to Shield Hypervisors From AI-Driven Attacks