https://threattimes.com/category/tech/samsung-week-2026-sale-launches-with-up-to-500/Threat Timesen2026-10-15T16:06:39ZSamsung Week 2026 Sale Launches With Up To $500 Off Galaxy Book 6 PCshttps://threattimes.com/category/vulnerabilities/researcher-claims-chatgpt-github-flaw-allows/Threat Timesen2026-10-15T16:06:39ZResearcher claims ChatGPT GitHub flaw allows secret theft via prompt injectionhttps://threattimes.com/category/tech/ubuntu-26-10-introduces-myna-local-ai-voice-agent/Threat Timesen2026-10-15T16:06:12ZUbuntu 26.10 Introduces Myna Local AI Voice Agent and Post-Quantum Signinghttps://threattimes.com/category/ai/amazon-unveils-bee-frontier-and-eclipse-ai-note/Threat Timesen2026-10-15T16:06:12ZAmazon unveils Bee Frontier and Eclipse AI note-taking hardware with wearable optionhttps://threattimes.com/category/data-breaches/vibetech-database-misconfiguration-exposes-13-7/Threat Timesen2026-10-15T16:06:12ZVibetech Database Misconfiguration Exposes 13.7 Million Records Including FBI and AT&T Datahttps://threattimes.com/category/ai/nfox-lab-to-open-source-blockhouse-sandbox-for/Threat Timesen2026-10-15T16:06:12ZnFOX Lab to open-source Blockhouse sandbox for secure AI model deploymenthttps://threattimes.com/category/vulnerabilities/fortinet-patches-cvss-9-6-fortisandbox-gui-flaw/Threat Timesen2026-10-15T16:02:36ZFortinet patches CVSS 9.6 FortiSandbox GUI flaw enabling unauthenticated remote code execution via CVE-2026-107656https://threattimes.com/category/tech/nvidia-and-apple-lead-big-tech-donations-to-trump/Threat Timesen2026-10-15T15:58:13ZNvidia and Apple Lead Big Tech Donations to Trump White House Ballroom Projecthttps://threattimes.com/category/vulnerabilities/security-leaders-urge-shift-from-theoretical/Threat Timesen2026-10-15T15:54:20ZSecurity Leaders Urge Shift from Theoretical Scores to Real Exploit Datahttps://threattimes.com/category/ai/cerebras-exec-says-inference-speed-critical-for/Threat Timesen2026-10-15T15:53:51ZCerebras Exec Says Inference Speed Critical for Agentic AI Workflowshttps://threattimes.com/category/ai/cerebras-claims-fastest-inference-speed-is-key/Threat Timesen2026-10-15T15:53:51ZCerebras claims fastest inference speed is key for agentic AI workflowshttps://threattimes.com/category/tech/microsoft-pitches-windows-11-speed-and-stability/Threat Timesen2026-10-15T15:53:51ZMicrosoft pitches Windows 11 speed and stability over AI in latest updatehttps://threattimes.com/category/vulnerabilities/bank-of-america-deploys-4-000-staff-to-patch-ai/Threat Timesen2026-10-15T15:40:53ZBank of America deploys 4,000 staff to patch AI-discovered flawshttps://threattimes.com/category/cyber-attacks/nvidia-launches-nemotron-3-5-super-vl-and-bolt/Threat Timesen2026-10-15T15:39:55ZNvidia Launches Nemotron 3.5 Super VL and Bolt Edge Models for Agentshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-webpros-solusvm-2/Threat Timesen2026-10-15T15:35:01ZCritical Server-Side Template Injection Flaw Found in SolusVM 2 Allows Root Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-15T15:35:01ZWavlink patches critical remote heap overflow in WN530HG4B Wi-Fi router firmwarehttps://threattimes.com/category/tech/microsoft-rolls-out-redesigned-photos-app-to/Threat Timesen2026-10-15T15:31:21ZMicrosoft Rolls Out Redesigned Photos App to Windows 11 Insiders Todayhttps://threattimes.com/category/ai/amazon-launches-always-on-recording-bee-frontier/Threat Timesen2026-10-15T15:31:21ZAmazon Launches Always-On Recording Bee Frontier and Magnetic Bee Eclipse AI Gadgetshttps://threattimes.com/category/tech/3mdeb-updates-dasharo-firmware-for-asrock-rack/Threat Timesen2026-10-15T15:31:21Z3mdeb Updates Dasharo Firmware for ASRock Rack SPC741D8-2L2T Server Boardhttps://threattimes.com/category/cyber-attacks/microsoft-leads-takedown-of-phishing-network-that/Threat Timesen2026-10-15T15:29:33ZMicrosoft Leads Takedown of Phishing Network That Sent Over a Billion Messageshttps://threattimes.com/category/tech/toms-hardware-review-finds-googlebook-os-lacks-pc/Threat Timesen2026-10-15T15:29:33ZTom's Hardware Review Finds Googlebook OS Lacks PC Polish Despite Strong Hardwarehttps://threattimes.com/category/tech/study-finds-restored-atoll-ecosystems-can-help/Threat Timesen2026-10-15T15:29:33ZStudy finds restored atoll ecosystems can help islands keep pace with rising seashttps://threattimes.com/category/ai/youtube-music-rolls-out-labels-for-ai-generated/Threat Timesen2026-10-15T15:29:33ZYouTube Music Rolls Out Labels for AI-Generated Songshttps://threattimes.com/category/vulnerabilities/opnsense-core-path-traversal-flaw-cve-2026-57155/Threat Timesen2026-10-15T15:24:45ZOPNsense Fixes Critical Privilege Escalation Flaw in GeoIP Importerhttps://threattimes.com/category/tech/shelly-launches-gen4-presence-sensor-using-radar/Threat Timesen2026-10-15T15:19:06ZShelly Launches Gen4 Presence Sensor Using Radar to Track Ten Peoplehttps://threattimes.com/category/tech/study-finds-healthy-ecosystems-help-atoll-islands/Threat Timesen2026-10-15T15:19:06ZStudy Finds Healthy Ecosystems Help Atoll Islands Resist Sea-Level Risehttps://threattimes.com/category/tech/nvidia-releases-nemotron-3-5-super-vl-and-bolt/Threat Timesen2026-10-15T15:19:06ZNVIDIA releases Nemotron 3.5 Super VL and Bolt edge modelshttps://threattimes.com/category/vulnerabilities/codepeople-cp-multi-view-event-calendar-sql/Threat Timesen2026-10-15T15:17:05ZSQL Injection Flaw in Backuply Plugin Exposes 600,000 WordPress Sites to Takeoverhttps://threattimes.com/category/vulnerabilities/bank-of-america-ceo-says-1-000-contractors-hired/Threat Timesen2026-10-15T15:13:36ZBank of America CEO says 1,000 contractors hired to patch Mythos AI flawshttps://threattimes.com/category/vulnerabilities/citrix-patches-xenserver-flaws-letting-privileged/Threat Timesen2026-10-15T15:04:39ZCitrix Patches XenServer Flaws Letting Privileged VM Users Compromise Hostshttps://threattimes.com/category/tech/microsoft-claims-windows-11-is-20-more-responsive/Threat Timesen2026-10-15T14:57:10ZMicrosoft claims Windows 11 is 20% more responsive with improved memory managementhttps://threattimes.com/category/vulnerabilities/critical-severity-insecure-deserialization-flaw-17/Threat Timesen2026-10-15T14:48:04ZCritical RCE in EspoCRM Allows Admins to Execute Arbitrary Codehttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-10/Threat Timesen2026-10-15T14:48:04ZWavlink WL-WN530BE2-A Router Patched for Critical Remote Command Injection Flawhttps://threattimes.com/category/cyber-attacks/hackers-use-clickfix-and-python-tunnels-to/Threat Timesen2026-10-15T14:48:02ZHackers Use ClickFix and Python Tunnels to Prepare Windows Systems for Ransomwarehttps://threattimes.com/category/malware/citizen-lab-discover-tech-ad-platform-delivered/Threat Timesen2026-10-15T14:48:02ZCitizen Lab: Discover-Tech Ad Platform Delivered Spyware to Al Jazeerahttps://threattimes.com/category/tech/google-launches-universal-cart-for-us-users-in/Threat Timesen2026-10-15T14:48:02ZGoogle launches Universal Cart for US users in Search and Geminihttps://threattimes.com/category/ai/nvidia-submits-liquid-cooled-vera-rubin-designs/Threat Timesen2026-10-15T14:33:48ZNvidia Submits Liquid-Cooled Vera Rubin Designs to Open Compute Projecthttps://threattimes.com/category/tech/apple-opens-iphone-duo-pre-order-prep-tool-ahead/Threat Timesen2026-10-15T14:33:48ZApple opens iPhone Duo pre-order prep tool ahead of Friday launchhttps://threattimes.com/category/tech/meta-resolves-issue-causing-ray-ban-smart-glasses/Threat Timesen2026-10-15T14:32:51ZMeta Resolves Issue Causing Ray-Ban Smart Glasses to Record Audio Without User Prompthttps://threattimes.com/category/malware/researchers-link-israeli-ad-firm-to-zero-click/Threat Timesen2026-10-15T14:32:51ZResearchers Link Israeli Ad Firm to Zero-Click Spyware Attacks on Al Jazeera Staffhttps://threattimes.com/category/malware/citizen-lab-reveals-zero-click-spyware-infection/Threat Timesen2026-10-15T14:32:51ZCitizen Lab Reveals Zero-Click Spyware Infection via Targeted Online Adshttps://threattimes.com/category/vulnerabilities/aws-patches-remote-code-execution-flaw-in/Threat Timesen2026-10-15T14:25:52ZAWS Patches Remote Code Execution Flaw in Advanced JDBC Wrapperhttps://threattimes.com/category/privacy/russia-tightens-internet-controls-raising/Threat Timesen2026-10-15T14:18:05ZRussia Tightens Internet Controls, Raising Operational Risks for Organizationshttps://threattimes.com/category/ai/openai-highlights-study-mode-for-brazilian/Threat Timesen2026-10-15T14:16:22ZOpenAI Highlights Study Mode for Brazilian Portuguese Educators on Teachers’ Dayhttps://threattimes.com/category/tech/cloudflare-open-sources-void-platform-for-secure/Threat Timesen2026-10-15T14:13:54ZCloudflare open-sources Void platform for secure internal app deploymenthttps://threattimes.com/category/ai/servicenow-renames-ai-control-tower-adds/Threat Timesen2026-10-15T14:13:54ZServiceNow Renames AI Control Tower, Adds Verifiable Agent Identitieshttps://threattimes.com/category/ai/descope-launches-agentic-identity-hub-3-0-to/Threat Timesen2026-10-15T13:39:05ZDescope Launches Agentic Identity Hub 3.0 to Secure Shadow AI Agentshttps://threattimes.com/category/tech/nvidia-adjusts-dlss-5-visuals-to-preserve/Threat Timesen2026-10-15T13:39:05ZNvidia Adjusts DLSS 5 Visuals to Preserve Artistic Intent in New Updatehttps://threattimes.com/category/tech/john-ternus-calls-memory-chip-shortage-a-crisis/Threat Timesen2026-10-15T13:37:13ZJohn Ternus calls memory chip shortage a crisis for Apple hardware productionhttps://threattimes.com/category/malware/unit-42-links-peerstitch-implant-to-fortimanager-2/Threat Timesen2026-10-15T13:37:13ZUnit 42 Links PEERSTITCH Implant to FortiManager Breach Affecting 500+ Firewallshttps://threattimes.com/category/ai/openkylin-unveils-ai-runtime-and-intent/Threat Timesen2026-10-15T13:36:41ZopenKylin Unveils AI Runtime and Intent Management Vision at OSS EU 2026https://threattimes.com/category/cyber-attacks/malwarebytes-launches-free-scam-link-check-tool/Threat Timesen2026-10-15T13:36:40ZMalwarebytes launches free Scam Link Check tool to scan suspicious URLshttps://threattimes.com/category/ai/servicenow-launches-ai-passport-for-agent/Threat Timesen2026-10-15T13:30:47ZServiceNow Launches AI Passport for Agent Governance and Controlhttps://threattimes.com/category/ai/analyst-says-ai-needs-250-million-job-cuts-to/Threat Timesen2026-10-15T13:30:47ZAnalyst says AI needs 250 million job cuts to justify $2.5 trillion spendhttps://threattimes.com/category/cyber-attacks/greynoise-analysis-reveals-proxyjacking-campaign/Threat Timesen2026-10-15T13:30:35ZGreyNoise Analysis Reveals Proxyjacking Campaign Targeting 143 Devices Globallyhttps://threattimes.com/category/tech/time-names-google-synthid-one-of-the-best/Threat Timesen2026-10-15T13:30:35ZTIME Names Google SynthID One of the Best Inventions of 2026https://threattimes.com/category/tech/fbi-warns-of-election-crimes-and-threats-to/Threat Timesen2026-10-15T13:30:35ZFBI warns of election crimes and threats to workers ahead of 2026 midtermshttps://threattimes.com/category/cyber-attacks/fbi-warns-scammers-could-exploit-2026-midterm/Threat Timesen2026-10-15T13:30:35ZFBI Warns Scammers Could Exploit 2026 Midterm Elections for Fraudhttps://threattimes.com/category/tech/apple-sets-deadline-for-iphone-duo-pre-order-prep/Threat Timesen2026-10-15T13:24:54ZApple Sets Deadline for iPhone Duo Pre-Order Prep Tool Before Friday Launchhttps://threattimes.com/category/ai/google-launches-universal-cart-in-u-s-across/Threat Timesen2026-10-15T13:19:07ZGoogle launches Universal Cart in U.S. across Search and Gemini apphttps://threattimes.com/category/tech/nine-minds-builds-algapsa-integration-with/Threat Timesen2026-10-15T13:19:07ZNine Minds Builds AlgaPSA Integration With Huntress API in Dayshttps://threattimes.com/category/ai/cloudflare-and-openai-pilot-helps-chatgpt/Threat Timesen2026-10-15T13:19:07ZCloudflare and OpenAI pilot helps ChatGPT discover hundreds of millions of new web pageshttps://threattimes.com/category/tech/nvidia-adds-dlss-4-5-cloud-controls-and-new-games/Threat Timesen2026-10-15T13:19:07ZNVIDIA Adds DLSS 4.5 Cloud Controls and New Games to GeForce NOWhttps://threattimes.com/category/tech/microsoft-patches-windows-11-azure-virtual/Threat Timesen2026-10-15T13:10:42ZMicrosoft patches Windows 11 Azure Virtual Desktop bug in Oct 13 updatehttps://threattimes.com/category/data-breaches/unverified-200gb-cartoon-network-production/Threat Timesen2026-10-15T13:10:31ZUnverified 200GB Cartoon Network Production Archive Circulates Onlinehttps://threattimes.com/category/tech/x-removes-13-000-accounts-linked-to-suspected/Threat Timesen2026-10-15T13:06:07ZX removes 13,000 accounts linked to suspected foreign meddling before US midtermshttps://threattimes.com/category/ai/nvidia-rtx-spark-in-surface-laptop-ultra-outpaces/Threat Timesen2026-10-15T13:06:07ZNvidia RTX Spark in Surface Laptop Ultra Outpaces Apple M5 Max in Agentic AI Benchmarkshttps://threattimes.com/category/vulnerabilities/cve-2026-109688-sql-injection-flaw-in-link/Threat Timesen2026-10-15T13:04:05ZCritical SQL Injection Flaw Found in Link Whisper Free Plugin Versions Up to 0.9.7https://threattimes.com/category/vulnerabilities/shabti-kaplan-frontend-admin-by-dynamiapps-flaw/Threat Timesen2026-10-15T13:04:05ZCritical Privilege Escalation Flaw Found in DynamiApps Frontend Admin Pluginhttps://threattimes.com/category/vulnerabilities/cve-2026-109686-insecure-deserialization-flaw-in/Threat Timesen2026-10-15T13:04:05ZLink Whisper Free Plugin Has Critical Deserialization Flaw in Versions Up to 0.9.7https://threattimes.com/category/ai/ferc-flags-ai-and-registration-gaps-in-us-power/Threat Timesen2026-10-15T13:03:45ZFERC flags AI and registration gaps in US power sector auditshttps://threattimes.com/category/malware/kgb-rat-malware-uses-njrat-code-and-crypter-to/Threat Timesen2026-10-15T13:03:45ZKGB RAT Malware Uses NjRAT Code and Crypter to Bypass Windows Defenderhttps://threattimes.com/category/vulnerabilities/linux-flaw-cve-2026-99999-rated-cvss-9-3/Threat Timesen2026-10-15T12:46:41ZLinux kernel flaw allows network header corruption via bad IPv4 checksumshttps://threattimes.com/category/tech/cnet-identifies-target-demographic-for-apple/Threat Timesen2026-10-15T12:43:09ZCNET Identifies Target Demographic for Apple iPhone Duo Foldablehttps://threattimes.com/category/tech/nvidia-rtx-spark-soc-launches-for-windows-with-ai/Threat Timesen2026-10-15T12:42:48ZNVIDIA RTX Spark SoC Launches for Windows with AI Focushttps://threattimes.com/category/malware/ghostbat-rat-evolves-to-steal-upi-pins-via-fake/Threat Timesen2026-10-15T12:42:48ZGhostBat RAT Evolves to Steal UPI PINs via Fake Traffic Challan Texts in Indiahttps://threattimes.com/category/vulnerabilities/unit-42-links-peerstitch-implant-to-fortimanager/Threat Timesen2026-10-15T12:42:48ZUnit 42 Links PEERSTITCH Implant to FortiManager Breach Affecting 500+ Firewallshttps://threattimes.com/category/tech/united-airlines-launches-real-time-tracker-for/Threat Timesen2026-10-15T12:30:25ZUnited Airlines Launches Real-Time Tracker for Starlink Wi-Fi Availability on Flightshttps://threattimes.com/category/vulnerabilities/drupal-patches-critical-rce-in-field-ui-module/Threat Timesen2026-10-15T12:30:25ZDrupal patches critical RCE in Field UI module affecting core versionshttps://threattimes.com/category/ai/microsoft-releases-vs-code-1-142-with-new-kanban/Threat Timesen2026-10-15T12:30:25ZMicrosoft releases VS Code 1.142 with new Kanban board for AI agentshttps://threattimes.com/category/ai/amazon-launches-bee-frontier-wristband-and/Threat Timesen2026-10-15T12:30:25ZAmazon Launches Bee Frontier Wristband and Eclipse Recorder for AI Note-Takinghttps://threattimes.com/category/cyber-attacks/mozilla-launches-firefox-enterprise-158-0-with/Threat Timesen2026-10-15T12:30:25ZMozilla Launches Firefox Enterprise 158.0 With Built-in DLP and AI Controlshttps://threattimes.com/category/tech/rocket-lab-delays-neutron-rocket-launch-to-2027/Threat Timesen2026-10-15T12:27:10ZRocket Lab Delays Neutron Rocket Launch to 2027 Due to Carbon Composite Flawshttps://threattimes.com/category/vulnerabilities/critical-severity-sql-injection-flaw-in-kitae/Threat Timesen2026-10-15T12:24:19ZCritical SQL Injection Flaw Found in Mang Board WP Plugin Through Version 2.4.4https://threattimes.com/category/ai/bee-launches-frontier-wearable-and-eclipse-phone/Threat Timesen2026-10-15T12:17:31ZBee Launches Frontier Wearable and Eclipse Phone Device Under Amazon Ownershiphttps://threattimes.com/category/ai/amazons-bee-launches-frontier-and-eclipse-ai/Threat Timesen2026-10-15T12:17:31ZAmazon’s Bee Launches Frontier and Eclipse AI Wearables Starting at $75https://threattimes.com/category/tech/amazon-launches-bee-frontier-and-eclipse-ai/Threat Timesen2026-10-15T12:17:31ZAmazon Launches Bee Frontier and Eclipse AI Wearables with New Subscriptionhttps://threattimes.com/category/tech/ledger-launches-android-based-atom-hardware/Threat Timesen2026-10-15T12:17:31ZLedger Launches Android-Based Atom Hardware Wallet Amid Supply Chain Tampering Crisishttps://threattimes.com/category/ai/macpaw-launches-eney-a-proactive-ai-assistant-for/Threat Timesen2026-10-15T12:17:31ZMacPaw launches Eney, a proactive AI assistant for Mac and iPhonehttps://threattimes.com/category/ai/toms-hardware-tests-nvidia-rtx-spark-in-surface/Threat Timesen2026-10-15T12:17:31ZTom's Hardware Tests Nvidia RTX Spark in Surface Laptop Ultra, Finds Local AI Strengthshttps://threattimes.com/category/threat-intel/openai-execs-warn-staff-on-espionage-honey-pots/Threat Timesen2026-10-15T12:17:31ZOpenAI Execs Warn Staff on Espionage, Honey Pots, and Insider Threatshttps://threattimes.com/category/ai/nvidia-reveals-n1x-chip-specs-for-new-spark/Threat Timesen2026-10-15T12:13:58ZNvidia Reveals N1X Chip Specs for New Spark Laptop Classhttps://threattimes.com/category/ai/asml-warns-it-cannot-meet-chipmaking-demand/Threat Timesen2026-10-15T12:07:31ZASML Warns It Cannot Meet Chipmaking Demand Despite Capacity Expansionshttps://threattimes.com/category/ai/andreessens-political-shift-and-white-house-ties/Threat Timesen2026-10-15T12:07:31ZAndreessen’s Political Shift and White House Ties Detailed in Bloomberg Profilehttps://threattimes.com/category/cyber-attacks/interpol-coordinates-arrests-of-95-suspects-in/Threat Timesen2026-10-15T12:07:31ZINTERPOL coordinates arrests of 95 suspects in global CSAM crackdownhttps://threattimes.com/category/cyber-attacks/ftc-alleges-sextortion-help-firm-swindled-victims/Threat Timesen2026-10-15T12:07:31ZFTC Alleges Sextortion Help Firm Swindled Victims Out of $60 Millionhttps://threattimes.com/category/cyber-attacks/ransomware-gangs-threaten-employees-families-in/Threat Timesen2026-10-15T11:55:32ZRansomware gangs threaten employees’ families in new extortion tacticshttps://threattimes.com/category/tech/apple-to-launch-touchscreen-macbook-pro-and-m6/Threat Timesen2026-10-15T11:55:32ZApple to Launch Touchscreen MacBook Pro and M6 Devices at Oct. 28 Eventhttps://threattimes.com/category/ai/openai-accuses-ex-employee-of-leaking-100-secret/Threat Timesen2026-10-15T11:53:27ZOpenAI Accuses Ex-Employee of Leaking 100+ Secret Files to Applehttps://threattimes.com/category/ai/google-bigquery-adds-daily-token-quotas-for/Threat Timesen2026-10-15T11:46:42ZGoogle BigQuery Adds Daily Token Quotas for Generative AI Functionshttps://threattimes.com/category/tech/apple-iphone-duo-features-replaceable-inner/Threat Timesen2026-10-15T11:44:51ZApple iPhone Duo features replaceable inner display layer to combat folding creaseshttps://threattimes.com/category/tech/bo-hines-held-stake-in-firm-receiving-tether/Threat Timesen2026-10-15T11:44:51ZBo Hines Held Stake in Firm Receiving Tether Funds During Stablecoin Legislationhttps://threattimes.com/category/ai/law-enforcement-uses-raven-ai-to-locate-homes/Threat Timesen2026-10-15T11:44:04ZLaw enforcement uses Raven AI to locate homes from indoor photoshttps://threattimes.com/category/vulnerabilities/check-point-discovers-high-risk-flaws-in-litellm/Threat Timesen2026-10-15T11:40:44ZCheck Point Discovers High-Risk Flaws in LiteLLM Gateway Toolhttps://threattimes.com/category/data-breaches/jury-finds-arm-breached-qualcomm-deal-but-awards/Threat Timesen2026-10-15T11:35:22ZJury finds Arm breached Qualcomm deal but awards only $2 in damageshttps://threattimes.com/category/tech/apple-invites-media-to-october-28-launch-event/Threat Timesen2026-10-15T11:35:22ZApple Invites Media to October 28 Launch Event for Touchscreen MacBookshttps://threattimes.com/category/tech/unofficial-super-mario-galaxy-port-allows-android/Threat Timesen2026-10-15T11:35:22ZUnofficial Super Mario Galaxy port allows Android play without emulator softwarehttps://threattimes.com/category/ai/ai-extinction-warnings-trace-back-to-mid-2000s/Threat Timesen2026-10-15T11:35:22ZAI Extinction Warnings Trace Back to Mid-2000s, Not Just Recent Hypehttps://threattimes.com/category/cyber-attacks/trellix-analysis-warns-ai-agents-leak-credentials/Threat Timesen2026-10-15T11:35:22ZTrellix Analysis Warns AI Agents Leak Credentials via Developer Tool Workflowshttps://threattimes.com/category/vulnerabilities/cve-2026-108497-sql-injection-flaw-in-tms-amelia/Threat Timesen2026-10-15T11:19:50ZCritical SQL Injection Flaw Found in TMS Amelia Booking Plugin Versions Through 2.4.10https://threattimes.com/category/vulnerabilities/wp-manageninja-llc-fluent-crm-flaw-cve-2026/Threat Timesen2026-10-15T11:19:50ZFluent CRM Privilege Escalation Flaw Rated Critical for WordPress Siteshttps://threattimes.com/category/ai/microsoft-shifts-copilot-pricing-to-consumption/Threat Timesen2026-10-15T11:19:38ZMicrosoft shifts Copilot pricing to consumption model for advanced agentshttps://threattimes.com/category/tech/ramp-raises-1-85b-at-60b-valuation-hits-2b/Threat Timesen2026-10-15T11:16:33ZRamp raises $1.85B at $60B valuation, hits $2B annualized revenuehttps://threattimes.com/category/vulnerabilities/snyk-research-shows-ai-agents-can-fix-vulnerable/Threat Timesen2026-10-15T11:16:33ZSnyk Research Shows AI Agents Can Fix Vulnerable Dependencies With High Accuracyhttps://threattimes.com/category/vulnerabilities/snyk-launches-agentic-appsec-to-counter-ai-driven/Threat Timesen2026-10-15T11:14:15ZSnyk Launches Agentic AppSec to Counter AI-Driven Vulnerability Surgehttps://threattimes.com/category/vulnerabilities/hackers-exploit-critical-flaws-in-supermarket/Threat Timesen2026-10-15T11:09:09ZHackers Exploit Critical Flaws in Supermarket Fridge Controllers Across Francehttps://threattimes.com/category/vulnerabilities/vercel-patches-critical-next-js-rce-flaws-in-svg/Threat Timesen2026-10-15T11:09:06ZVercel Patches Critical Next.js RCE Flaws in SVG Processing and Cache Componentshttps://threattimes.com/category/tech/india-to-mandate-caller-name-display-on-4g/Threat Timesen2026-10-15T11:04:47ZIndia to Mandate Caller Name Display on 4G Networks Starting November 2026https://threattimes.com/category/malware/citizen-lab-reveals-technical-proof-of-adfection/Threat Timesen2026-10-15T11:04:46ZCitizen Lab Reveals Technical Proof of AdFection Zero-Click Spyware Campaignhttps://threattimes.com/category/cyber-attacks/uta0576-chains-three-ivanti-zero-days-cisa-adds/Threat Timesen2026-10-15T10:51:51ZUTA0576 Chains Three Ivanti Zero-Days; CISA Adds CVE-2026-104935 to KEV Cataloghttps://threattimes.com/category/vulnerabilities/microsoft-reveals-ad-fs-bypass-flaw-cve-2026/Threat Timesen2026-10-15T10:46:52ZMicrosoft Reveals AD FS Bypass Flaw CVE-2026-69982 in Security Update Guidehttps://threattimes.com/category/malware/air-force-pilots-used-unvetted-usb-drives-for/Threat Timesen2026-10-15T10:46:52ZAir Force Pilots Used Unvetted USB Drives for Classified Mission Planning in Afghanistanhttps://threattimes.com/category/ai/glean-ceo-arvind-jain-says-company-aims-to-be/Threat Timesen2026-10-15T10:32:41ZGlean CEO Arvind Jain says company aims to be easily replaceablehttps://threattimes.com/category/tech/tsmc-ceo-insists-company-must-run-any-musk/Threat Timesen2026-10-15T10:30:08ZTSMC CEO insists company must run any Musk Terafab facilityhttps://threattimes.com/category/malware/hirudo-android-rat-replaces-banking-apps-with/Threat Timesen2026-10-15T10:30:08ZHirudo Android RAT Replaces Banking Apps With Trojanized Clones to Bypass Securityhttps://threattimes.com/category/tech/nvidia-pledges-open-models-and-compute-access-for/Threat Timesen2026-10-15T10:19:27ZNVIDIA Pledges Open Models and Compute Access for European Scientific Communityhttps://threattimes.com/category/cyber-attacks/fbi-arrested-openai-employee-for-allegedly/Threat Timesen2026-10-15T10:16:04ZFBI Arrested OpenAI Employee for Allegedly Bugging Conference Room Before Planned Flighthttps://threattimes.com/category/data-breaches/centerpoint-energy-breach-impacts-over-1-million/Threat Timesen2026-10-15T10:16:04ZCenterPoint Energy Breach Impacts Over 1 Million Texans with SSNshttps://threattimes.com/category/ai/openai-report-shows-agentic-ai-output-surges-in/Threat Timesen2026-10-15T10:16:04ZOpenAI report shows agentic AI output surges in European SMBshttps://threattimes.com/category/ai/ai-agent-wipes-the-challenge-sweden-season-2-edit/Threat Timesen2026-10-15T10:16:04ZAI Agent Wipes The Challenge Sweden Season 2 Edit Weeks Before Air Datehttps://threattimes.com/category/malware/citizen-lab-reveals-zero-click-spyware/Threat Timesen2026-10-15T10:16:04ZCitizen Lab reveals zero-click spyware distributed via targeted online adshttps://threattimes.com/category/malware/citizen-lab-reveals-adfection-spyware-campaign/Threat Timesen2026-10-15T10:14:28ZCitizen Lab reveals AdFection spyware campaign via targeted adshttps://threattimes.com/category/tech/house-house-boycotts-xbox-for-big-walk-over/Threat Timesen2026-10-15T10:14:21ZHouse House boycotts Xbox for Big Walk over Microsoft-Israel tieshttps://threattimes.com/category/tech/meta-terminates-abdulrahman-alfozan-following/Threat Timesen2026-10-15T10:14:21ZMeta Terminates Abdulrahman Alfozan Following Reports of Saudi Advisory Rolehttps://threattimes.com/category/ai/anthropic-q3-revenue-hits-16-8b-as-growth-slows/Threat Timesen2026-10-15T10:05:37ZAnthropic Q3 revenue hits $16.8B as growth slows ahead of November IPOhttps://threattimes.com/category/tech/microsoft-azure-prioritizes-practical-ai/Threat Timesen2026-10-15T10:05:14ZMicrosoft Azure Prioritizes Practical AI Infrastructure Over Larger Frontier Modelshttps://threattimes.com/category/ai/bank-of-america-ceo-1-000-contractors-hired-to/Threat Timesen2026-10-15T09:54:53ZBank of America CEO: 1,000 Contractors Hired to Fix AI-Exposed Code Flawshttps://threattimes.com/category/cyber-attacks/anthropic-report-says-ai-agents-now-automate-full/Threat Timesen2026-10-15T09:54:53ZAnthropic report says AI agents now automate full cyber kill chainhttps://threattimes.com/category/tech/two-dead-one-injured-in-explosion-at-intels/Threat Timesen2026-10-15T09:54:53ZTwo dead, one injured in explosion at Intel’s Kiryat Gat chip planthttps://threattimes.com/category/tech/tsmc-plans-new-3nm-chip-fab-in-tainan-for-2028/Threat Timesen2026-10-15T09:54:52ZTSMC Plans New 3nm Chip Fab in Tainan for 2028 Productionhttps://threattimes.com/category/vulnerabilities/poc-code-released-for-fortinet-forticlient-ems/Threat Timesen2026-10-15T09:54:52ZPoC Code Released for Fortinet FortiClient EMS Authentication Bypass CVE-2026-35616https://threattimes.com/category/tech/microsoft-announces-xbox-nano-controller/Threat Timesen2026-10-15T09:54:41ZMicrosoft Announces Xbox Nano Controller Launching November 4 at $49.99https://threattimes.com/category/vulnerabilities/cve-2026-19863-authentication-bypass-flaw-in/Threat Timesen2026-10-15T09:52:39ZCritical bypass flaw in Eclipse EthereumAuthenticator allows unauthenticated accesshttps://threattimes.com/category/tech/tsmc-demands-operational-control-for-any-musk/Threat Timesen2026-10-15T09:42:13ZTSMC demands operational control for any Musk Terafab partnershiphttps://threattimes.com/category/vulnerabilities/qnap-systems-smedio-dtcp-move-missing/Threat Timesen2026-10-15T09:41:37ZsMedio DTCP MOVE Patch Fixes Critical Remote Access Flaw CVE-2026-34006https://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-qnap-systems-qumagie/Threat Timesen2026-10-15T09:41:37ZQNAP QuMagie Symlink Flaw CVE-2026-50612 Allows System Compromisehttps://threattimes.com/category/vulnerabilities/qnap-systems-hybriddesk-station-os-command/Threat Timesen2026-10-15T09:41:37ZQNAP Deploys Emergency Updates for HybridDesk Station to Block CVSS 9.3 Remote Code Execution Threathttps://threattimes.com/category/vulnerabilities/qnap-systems-qsirch-path-traversal-flaw-cve-2026/Threat Timesen2026-10-15T09:41:37ZQNAP Fixes Critical Path Traversal Flaw in Qsirch Search Enginehttps://threattimes.com/category/ai/ai-agents-need-reliable-state-not-just-memory-to/Threat Timesen2026-10-15T09:26:41ZAI agents need reliable state, not just memory, to prevent duplicate actionshttps://threattimes.com/category/ai/infoworld-report-highlights-accountability-gaps/Threat Timesen2026-10-15T09:26:10ZInfoWorld report highlights accountability gaps in autonomous agentic AI systemshttps://threattimes.com/category/tech/proofpoint-launches-microsoft-365-risk-dashboard/Threat Timesen2026-10-15T09:26:10ZProofpoint launches Microsoft 365 risk dashboard and AI assistant for MSPshttps://threattimes.com/category/tech/uk-ncsc-issues-updated-tls-guidance-for-post/Threat Timesen2026-10-15T09:26:10ZUK NCSC issues updated TLS guidance for post-quantum cryptography migrationhttps://threattimes.com/category/ai/block-uses-openai-tools-to-investigate-threats/Threat Timesen2026-10-15T09:26:10ZBlock Uses OpenAI Tools to Investigate Threats and Propose Patches in Minuteshttps://threattimes.com/category/ai/uk-officials-delay-ai-safeguards-in-cyber/Threat Timesen2026-10-15T09:20:41ZUK officials delay AI safeguards in Cyber Security Bill despite ministerial pledgeshttps://threattimes.com/category/tech/anaconda-hosts-2-500-arm-packages-as-pypi-native/Threat Timesen2026-10-15T09:16:46ZAnaconda Hosts 2,500 Arm Packages as PyPI Native Support Reaches 94%https://threattimes.com/category/tech/uk-ncsc-issues-tls-configuration-guidance-and/Threat Timesen2026-10-15T09:15:22ZUK NCSC Issues TLS Configuration Guidance and Post-Quantum Migration Advicehttps://threattimes.com/category/ai/epic-games-launches-ai-coded-launcher-preview/Threat Timesen2026-10-15T09:12:20ZEpic Games launches AI-coded launcher preview with Linux support and faster startup timeshttps://threattimes.com/category/vulnerabilities/cve-2026-101287-flaw-in-diaple-stela-scores-9-3/Threat Timesen2026-10-15T09:07:20ZCritical Auth Bypass in Diaple Stela Lets Attackers Impersonate Adminshttps://threattimes.com/category/tech/netskope-ciso-james-robinson-traces-path-from/Threat Timesen2026-10-15T09:06:31ZNetskope CISO James Robinson Traces Path from Vocational School to Security Leadershiphttps://threattimes.com/category/ai/royal-navy-seeks-suppliers-for-type-93-uncrewed/Threat Timesen2026-10-15T09:06:31ZRoyal Navy seeks suppliers for Type 93 uncrewed submarine and AUKUS payloadshttps://threattimes.com/category/data-breaches/uk-data-regulator-reprimands-metropolitan-police/Threat Timesen2026-10-15T09:06:31ZUK Data Regulator Reprimands Metropolitan Police Over Unapproved Auror Platform Usehttps://threattimes.com/category/cyber-attacks/survey-finds-ai-in-84-of-ransomware-attacks/Threat Timesen2026-10-15T09:05:54ZSurvey Finds AI in 84% of Ransomware Attacks, Identity Systems Primary Targethttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-mitsubishi-electric/Threat Timesen2026-10-15T08:50:01ZCritical flaw in Mitsubishi GENESIS lets attackers bypass password recoveryhttps://threattimes.com/category/vulnerabilities/mitsubishi-electric-corporation-genesis64-flaw/Threat Timesen2026-10-15T08:50:01ZMitsubishi Electric GENESIS64 Flaw Allows Remote DCOM Abusehttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-eclipse-vert-x-tracked/Threat Timesen2026-10-15T08:32:57ZEclipse Vert.x DB2 Client Deserialization Flaw Enables Remote Code Executionhttps://threattimes.com/category/tech/nasa-accelerates-davinci-venus-mission-launch-to/Threat Timesen2026-10-15T08:24:04ZNASA Accelerates DAVINCI Venus Mission Launch to December 2030, Shortening Schedulehttps://threattimes.com/category/tech/nasa-advances-venus-missions-davinci-and-veritas/Threat Timesen2026-10-15T08:24:04ZNASA Advances Venus Missions DAVINCI and VERITAS Despite Budget Cutshttps://threattimes.com/category/ai/dell-pitches-13-to-1-server-consolidation-to/Threat Timesen2026-10-15T08:21:42ZDell pitches 13-to-1 server consolidation to support agentic AI workloadshttps://threattimes.com/category/ai/arkansas-sues-openai-over-chatgpt-safety-claims/Threat Timesen2026-10-15T08:21:42ZArkansas sues OpenAI over ChatGPT safety claims, data practiceshttps://threattimes.com/category/ai/ibm-survey-finds-80-of-emea-leaders-faced-ai/Threat Timesen2026-10-15T08:21:42ZIBM survey finds 80% of EMEA leaders faced AI incidents at board level last yearhttps://threattimes.com/category/tech/opera-relaunches-air-browser-with-minimalist/Threat Timesen2026-10-15T08:21:42ZOpera Relaunches Air Browser With Minimalist Design and Focus Toolshttps://threattimes.com/category/cyber-attacks/uk-legal-aid-agency-confirms-hackers-stole/Threat Timesen2026-10-15T08:21:42ZUK Legal Aid Agency Confirms Hackers Stole Records Dating Back to 1978https://threattimes.com/category/vulnerabilities/sonicwall-nsm-flaws-allow-command-execution-and/Threat Timesen2026-10-15T08:20:23ZSonicWall NSM flaws allow command execution and privilege escalationhttps://threattimes.com/category/cyber-attacks/eset-warns-of-medicare-fraud-surge-during-open/Threat Timesen2026-10-15T08:20:23ZESET warns of Medicare fraud surge during Open Enrollment seasonhttps://threattimes.com/category/ai/colossal-biosciences-launches-genomorph-ai/Threat Timesen2026-10-15T08:11:59ZColossal Biosciences launches GenoMorph AI platform for de-extinction researchhttps://threattimes.com/category/ai/openai-names-ex-xai-exec-ruddarraju-to-lead/Threat Timesen2026-10-15T08:11:59ZOpenAI names ex-xAI exec Ruddarraju to lead compute and infrastructurehttps://threattimes.com/category/tech/apple-uses-ipad-pro-and-iphone-18-pro-max-for/Threat Timesen2026-10-15T08:11:00ZApple Uses iPad Pro and iPhone 18 Pro Max for Turkey Fashion Showhttps://threattimes.com/category/tech/north-macedonia-and-fbi-arrest-suspected-olvx/Threat Timesen2026-10-15T08:09:17ZNorth Macedonia and FBI Arrest Suspected OLVX Cybercrime Market Administratorhttps://threattimes.com/category/ai/eight-us-states-sue-openai-over-alleged-chatgpt/Threat Timesen2026-10-15T08:09:17ZEight US States Sue OpenAI Over Alleged ChatGPT Safety Failureshttps://threattimes.com/category/tech/apple-invites-update-adds-guest-management-tools/Threat Timesen2026-10-15T08:04:13ZApple Invites update adds guest management tools and extra-large widgethttps://threattimes.com/category/tech/microsoft-launches-xbox-nano-controller-its/Threat Timesen2026-10-15T08:04:13ZMicrosoft launches Xbox Nano controller, its smallest wireless gamepad yethttps://threattimes.com/category/ai/reolink-home-hub-2-offers-ai-camera-search/Threat Timesen2026-10-15T08:02:39ZReolink Home Hub 2 Offers AI Camera Search Without Subscription Feeshttps://threattimes.com/category/tech/apple-confirms-siri-ai-launch-dates-and-device/Threat Timesen2026-10-15T07:58:18ZApple Confirms Siri AI Launch Dates and Device Support for Home Ecosystemhttps://threattimes.com/category/tech/flock-ceo-claims-microphones-detect-only-gunshots/Threat Timesen2026-10-15T07:58:18ZFlock CEO claims microphones detect only gunshots despite website listing broader audio alertshttps://threattimes.com/category/ai/google-ai-plus-users-lose-pro-model-access/Threat Timesen2026-10-15T07:57:44ZGoogle AI Plus Users Lose Pro Model Access Starting November 13https://threattimes.com/category/tech/ip-addresses-expose-location-isp-and-vpn-status/Threat Timesen2026-10-15T07:57:44ZIP Addresses Expose Location, ISP, and VPN Status Before Web Pages Loadhttps://threattimes.com/category/ai/zenzap-raises-44m-to-build-private-messenger-with/Threat Timesen2026-10-15T07:57:44ZZenzap Raises $44M to Build Private Messenger With AI Agents for Enterprisehttps://threattimes.com/category/cyber-attacks/north-macedonia-charges-olvx-marketplace-operator/Threat Timesen2026-10-15T07:57:28ZNorth Macedonia charges OLVX marketplace operator with fraud and CSAM distributionhttps://threattimes.com/category/tech/ai-deepfakes-and-scams-surge-ahead-of-2026-us/Threat Timesen2026-10-15T07:57:16ZAI deepfakes and scams surge ahead of 2026 US midterm electionshttps://threattimes.com/category/tech/apple-closes-above-5-trillion-market-cap-for/Threat Timesen2026-10-15T07:57:16ZApple closes above $5 trillion market cap for first timehttps://threattimes.com/category/tech/jio-platforms-sets-price-band-for-3-2-billion-ipo/Threat Timesen2026-10-15T07:57:16ZJio Platforms Sets Price Band for $3.2 Billion IPO, India’s Largest Everhttps://threattimes.com/category/ai/cedardb-combines-transactional-and-analytical/Threat Timesen2026-10-15T07:57:16ZCedarDB Combines Transactional and Analytical Workloads for AI Agentshttps://threattimes.com/category/ai/prosecutors-openai-spy-suspect-booked-one-way/Threat Timesen2026-10-15T07:57:16ZProsecutors: OpenAI Spy Suspect Booked One-Way Ticket to Saudi Arabia Before Arresthttps://threattimes.com/category/ai/optro-launches-auditable-ai-agents-for-enterprise/Threat Timesen2026-10-15T07:53:03ZOptro launches auditable AI agents for enterprise GRC workflowshttps://threattimes.com/category/ai/hawaii-parent-sues-openai-over-alleged-child-data/Threat Timesen2026-10-15T07:50:36ZHawaii Parent Sues OpenAI Over Alleged Child Data Scraping for ChatGPThttps://threattimes.com/category/vulnerabilities/qualys-launches-trurisk-eliminate-2-0-with/Threat Timesen2026-10-15T07:48:15ZQualys Launches TruRisk Eliminate 2.0 With TruConfidence Enginehttps://threattimes.com/category/tech/huntress-report-details-dark-web-structure-and/Threat Timesen2026-10-15T07:48:15ZHuntress Report Details Dark Web Structure and Safe Access Methodshttps://threattimes.com/category/privacy/uk-watchdog-penalizes-met-police-for-unchecked/Threat Timesen2026-10-15T07:48:15ZUK Watchdog Penalizes Met Police for Unchecked Use of Retail Crime Platform Aurorhttps://threattimes.com/category/ai/microsoft-scouts-composable-memory-to-fix-ai-data/Threat Timesen2026-10-15T07:41:19ZMicrosoft scouts composable memory to fix AI data center shortageshttps://threattimes.com/category/tech/oracle-and-neocloud-shares-plunge-after-coreweave/Threat Timesen2026-10-15T07:41:19ZOracle and Neocloud Shares Plunge After CoreWeave Bond Yield Chart Goes Viral on Xhttps://threattimes.com/category/ai/spacexsi-grok-voice-3-0-ranks-first-on-artificial/Threat Timesen2026-10-15T07:41:19ZSpaceXSI Grok Voice 3.0 Ranks First on Artificial Analysis Speech-to-Speech Indexhttps://threattimes.com/category/ai/anthropic-reports-q3-revenue-of-16-8-billion/Threat Timesen2026-10-15T07:41:19ZAnthropic Reports Q3 Revenue of $16.8 Billion, Achieves Adjusted Profitabilityhttps://threattimes.com/category/tech/google-tests-firmware-3-79-for-older-home-and/Threat Timesen2026-10-15T07:41:19ZGoogle Tests Firmware 3.79 for Older Home and Nest Speakershttps://threattimes.com/category/tech/fox-and-roku-shareholders-approve-22-billion/Threat Timesen2026-10-15T07:29:11ZFox and Roku Shareholders Approve $22 Billion Acquisition Dealhttps://threattimes.com/category/tech/apple-iphone-duo-screen-repairs-cost-up-to-1-500/Threat Timesen2026-10-15T07:28:12ZApple iPhone Duo Screen Repairs Cost Up to $1,500 Without AppleCarehttps://threattimes.com/category/tech/ubisoft-shuts-down-redlynx-cuts-staff-in/Threat Timesen2026-10-15T07:28:12ZUbisoft shuts down RedLynx, cuts staff in Singapore and Germanyhttps://threattimes.com/category/ai/ibuypower-launches-3-999-amd-ai-mini-pc-with/Threat Timesen2026-10-15T07:28:08ZiBuyPower Launches $3,999 AMD AI Mini PC With 128GB RAM and Zen 5 Chiphttps://threattimes.com/category/tech/fish-audio-releases-drama-3-a-35b-open-weight/Threat Timesen2026-10-15T07:28:08ZFish Audio Releases Drama 3, a 35B Open-Weight Text-to-Speech Modelhttps://threattimes.com/category/ai/mckinsey-to-test-ai-client-simulations-in-entry/Threat Timesen2026-10-15T07:20:41ZMcKinsey to test AI client simulations in entry-level hiring interviewshttps://threattimes.com/category/vulnerabilities/eight-us-states-sue-openai-separately-over/Threat Timesen2026-10-15T07:20:41ZEight US States Sue OpenAI Separately Over Alleged Lack of Child Safeguardshttps://threattimes.com/category/cyber-attacks/google-adds-ai-scam-defenses-to-android-calls/Threat Timesen2026-10-15T07:20:41ZGoogle Adds AI Scam Defenses to Android Calls, Texts and Screen Sharinghttps://threattimes.com/category/ai/supermicro-urges-ai-factories-to-prioritize/Threat Timesen2026-10-15T07:20:41ZSupermicro urges AI factories to prioritize deployment speed over GPU countshttps://threattimes.com/category/tech/intero-biosystems-sells-lab-grown-human/Threat Timesen2026-10-15T07:17:36ZIntero Biosystems sells lab-grown human intestines to drugmakershttps://threattimes.com/category/tech/apple-homeview-launches-november-13-with-recipe/Threat Timesen2026-10-15T07:17:36ZApple HomeView Launches November 13 With Recipe Support And Apple Intelligencehttps://threattimes.com/category/ai/norrsken-and-nvidia-to-launch-stockholm-ai-lab/Threat Timesen2026-10-15T07:17:36ZNorrsken and Nvidia to Launch Stockholm AI Lab for Startups in 2027https://threattimes.com/category/vulnerabilities/palo-alto-networks-patches-pan-os-zero-day-used/Threat Timesen2026-10-15T07:17:36ZPalo Alto Networks Patches PAN-OS Zero-Day Used in Remote Code Execution Attackshttps://threattimes.com/category/privacy/eu-grocers-lose-millions-due-to-unpatched-fridge/Threat Timesen2026-10-15T07:17:36ZEU Grocers Lose Millions Due to Unpatched Fridge Firmware and Third-Party OT Management Failureshttps://threattimes.com/category/vulnerabilities/report-compares-top-secrets-detection-tools-amid/Threat Timesen2026-10-15T07:16:52ZReport Compares Top Secrets Detection Tools Amid Massive Credential Leakshttps://threattimes.com/category/cyber-attacks/fbi-and-north-macedonia-dismantle-olvx-illicit/Threat Timesen2026-10-15T07:07:28ZFBI and North Macedonia Dismantle OLVX Illicit Data Marketplacehttps://threattimes.com/category/ai/llama-for-windows-enables-local-ai-model/Threat Timesen2026-10-15T07:07:28ZLlama for Windows enables local AI model execution without administrative privilegeshttps://threattimes.com/category/cyber-attacks/attackers-used-prompt-injection-to-steal-keys-and/Threat Timesen2026-10-15T06:58:47ZAttackers used prompt injection to steal keys and target AI labs in Anthropic reporthttps://threattimes.com/category/ai/sherry-turkle-discusses-ai-chatbots-and-human/Threat Timesen2026-10-15T06:58:47ZSherry Turkle Discusses AI Chatbots and Human-Machine Relations in New York Times Interviewhttps://threattimes.com/category/malware/kgb-rat-uses-crypter-to-bypass-defender-in-new/Threat Timesen2026-10-15T06:58:46ZKGB RAT Uses Crypter to Bypass Defender in New Malware Campaignhttps://threattimes.com/category/cloud-security/microsoft-azure-blog-reveals-deep-dive-into-maia/Threat Timesen2026-10-15T06:57:03ZMicrosoft Azure Blog Reveals Deep Dive Into Maia 300 Architecturehttps://threattimes.com/category/tech/microsoft-opens-integrated-hsm-technology-to/Threat Timesen2026-10-15T06:51:21ZMicrosoft Opens Integrated HSM Technology to Advance Hardware Securityhttps://threattimes.com/category/privacy/eff-aclu-of-wisconsin-petition-state-supreme/Threat Timesen2026-10-15T06:48:04ZEFF, ACLU of Wisconsin Petition State Supreme Court on ALPR Warrantshttps://threattimes.com/category/tech/lehigh-researchers-build-150-kwh-concrete-thermal/Threat Timesen2026-10-15T06:48:04ZLehigh researchers build 150 kWh concrete thermal battery for data center heat reusehttps://threattimes.com/category/ai/open-specs-can-slash-ai-hardware-integration-time/Threat Timesen2026-10-15T06:48:04ZOpen specs can slash AI hardware integration time from a year to monthshttps://threattimes.com/category/tech/datalab-launches-omniparsebench-to-audit-ocr/Threat Timesen2026-10-15T06:48:04ZDatalab Launches OmniParseBench to Audit OCR Parsers with 16,288 Testshttps://threattimes.com/category/tech/youtube-discusses-audiobook-feature-with/Threat Timesen2026-10-15T06:48:04ZYouTube Discusses Audiobook Feature With Publishers for Premium Bundlehttps://threattimes.com/category/ai/l-acoustics-uses-machine-learning-to-isolate/Threat Timesen2026-10-15T06:43:56ZL-Acoustics uses machine learning to isolate artist voices at live concertshttps://threattimes.com/category/ai/gudea-uses-ai-to-track-online-rumor-spread-and/Threat Timesen2026-10-15T06:37:19ZGudea Uses AI to Track Online Rumor Spread and Prevent Social Media Criseshttps://threattimes.com/category/tech/early-benchmarks-show-iphone-duo-a20-pro/Threat Timesen2026-10-15T06:37:14ZEarly Benchmarks Show iPhone Duo A20 Pro Performance Matches iPhone 18 Prohttps://threattimes.com/category/privacy/federal-appeals-court-allows-florida-to-enforce/Threat Timesen2026-10-15T06:37:14ZFederal appeals court allows Florida to enforce social media ban for users under 14https://threattimes.com/category/tech/apate-and-four-other-startups-advance-to/Threat Timesen2026-10-15T06:36:50ZApate and four other startups advance to TechCrunch Disrupt 2026 Battlefield finalshttps://threattimes.com/category/tech/windows-11-update-kb5127648-breaks-xbox-sign-in/Threat Timesen2026-10-15T06:36:19ZWindows 11 Update KB5127648 Breaks Xbox Sign-In with Error Code 0x87DD0005https://threattimes.com/category/vulnerabilities/hiddenlayer-finds-typesafe-ai-jev-decision-model/Threat Timesen2026-10-15T06:36:19ZHiddenLayer finds TypeSafe AI Jev decision model vulnerable to indirect prompt injectionhttps://threattimes.com/category/ai/eight-us-states-sue-openai-over-chatgpt-safety/Threat Timesen2026-10-15T06:29:02ZEight US States Sue OpenAI Over ChatGPT Safety and Parental Deceptionhttps://threattimes.com/category/tech/openai-agrees-to-preserve-device-data-in-ongoing/Threat Timesen2026-10-15T06:29:02ZOpenAI Agrees to Preserve Device Data in Ongoing Apple Trade Secret Disputehttps://threattimes.com/category/privacy/flock-ceo-defends-surveillance-tech-at-techcrunch/Threat Timesen2026-10-15T06:28:17ZFlock CEO defends surveillance tech at TechCrunch Disrupt amid privacy backlashhttps://threattimes.com/category/ai/ricursive-intelligence-aims-to-automate-chip/Threat Timesen2026-10-15T06:28:17ZRicursive Intelligence aims to automate chip design to solve compute crisishttps://threattimes.com/category/tech/fake-chrome-app-with-100-000-downloads-linked-to/Threat Timesen2026-10-15T06:21:27ZFake Chrome App With 100,000 Downloads Linked to Hizbartech on Google Playhttps://threattimes.com/category/ai/democratic-senators-question-metas-6-6b-in/Threat Timesen2026-10-15T06:14:43ZDemocratic senators question Meta's $6.6B in federal tax credits for AI data centershttps://threattimes.com/category/ai/epic-games-mandates-ai-first-workflows-for-code/Threat Timesen2026-10-15T06:14:43ZEpic Games mandates AI-first workflows for code and art on new shooterhttps://threattimes.com/category/tech/solidigm-seeks-us-approval-to-export-chip/Threat Timesen2026-10-15T06:14:43ZSolidigm seeks US approval to export chip equipment to China for Dalian planthttps://threattimes.com/category/ai/tsmc-q3-revenue-hits-record-46-36-billion-on-ai/Threat Timesen2026-10-15T06:10:19ZTSMC Q3 Revenue Hits Record $46.36 Billion on AI Chip Demandhttps://threattimes.com/category/threat-intel/tag-193-targets-diplomacy-and-resources-in-russia/Threat Timesen2026-10-15T06:09:01ZTAG-193 Targets Diplomacy and Resources in Russia, CIS States via Spearphishinghttps://threattimes.com/category/ai/anthropic-ipo-valuation-may-face-pressure-from/Threat Timesen2026-10-15T06:03:55ZAnthropic IPO Valuation May Face Pressure From Slowing Revenue Growth Trendshttps://threattimes.com/category/tech/bytedance-in-advanced-talks-to-buy-data-center/Threat Timesen2026-10-15T06:03:55ZByteDance in Advanced Talks to Buy Data Center ASICs from MediaTekhttps://threattimes.com/category/cyber-attacks/guardos-iphone-app-bundles-qr-scanning-breach/Threat Timesen2026-10-15T06:03:55ZGuardOS iPhone App Bundles QR Scanning, Breach Checks, and Safari Filteringhttps://threattimes.com/category/ai/asian-chipmakers-extend-losses-as-fed-rate-and-ai/Threat Timesen2026-10-15T06:03:55ZAsian chipmakers extend losses as Fed rate and AI funding fears mounthttps://threattimes.com/category/ai/google-awards-36-million-to-17-groups-using-ai/Threat Timesen2026-10-15T05:57:54ZGoogle Awards $36 Million to 17 Groups Using AI for Scientific Breakthroughshttps://threattimes.com/category/tech/asml-projects-china-to-drive-20-of-annual-sales/Threat Timesen2026-10-15T05:52:54ZASML Projects China to Drive 20% of Annual Sales After Q3 Surgehttps://threattimes.com/category/tech/figma-launches-specs-editor-and-code-layers-beta/Threat Timesen2026-10-15T05:52:53ZFigma launches Specs editor and code layers beta for AI agent controlhttps://threattimes.com/category/ai/jetbrains-report-ai-code-changes-create-ci-cd/Threat Timesen2026-10-15T05:52:53ZJetBrains Report: AI Code Changes Create CI/CD Review Bottleneckshttps://threattimes.com/category/tech/spacexai-grok-voice-3-0-tops-artificial-analysis/Threat Timesen2026-10-15T05:51:29ZSpaceXAI Grok Voice 3.0 Tops Artificial Analysis Speech-to-Speech Index With 86.9 Scorehttps://threattimes.com/category/ai/immuta-ciso-warns-of-critical-ai-agent-incidents/Threat Timesen2026-10-15T05:51:29ZImmuta CISO warns of critical AI agent incidents at major enterpriseshttps://threattimes.com/category/ai/chainalysis-data-shows-agentic-commerce-on/Threat Timesen2026-10-15T05:51:29ZChainalysis Data Shows Agentic Commerce on Coinbase Base Surged to 138 Million Transactions in Q3 2026https://threattimes.com/category/cyber-attacks/uat-6275-hackers-exploit-winrar-flaw-in-cis/Threat Timesen2026-10-15T05:40:23ZUAT-6275 Hackers Exploit WinRAR Flaw in CIS Government Espionage Campaignhttps://threattimes.com/category/cyber-attacks/censys-data-shows-ai-software-exposure-surges-63/Threat Timesen2026-10-15T05:40:23ZCensys Data Shows AI Software Exposure Surges 63% in Nine Monthshttps://threattimes.com/category/tech/idc-reports-record-22-drop-in-global-smartphone/Threat Timesen2026-10-15T05:40:02ZIDC reports record 22% drop in global smartphone shipments for Q3https://threattimes.com/category/tech/yoti-revenue-surges-past-32m-amid-uk-growth-and/Threat Timesen2026-10-15T05:27:28ZYoti Revenue Surges Past £32M Amid UK Growth and Spanish Regulatory Hurdleshttps://threattimes.com/category/tech/nordic-firms-deploy-nvidia-infrastructure-for-ai/Threat Timesen2026-10-15T05:22:08ZNordic firms deploy NVIDIA infrastructure for AI, supercomputing and agentic systemshttps://threattimes.com/category/vulnerabilities/aws-research-studio-fixes-cve-2026-14904-file/Threat Timesen2026-10-15T05:14:04ZAWS Research Studio Fixes CVE-2026-14904 File Read Flaw in Auth APIhttps://threattimes.com/category/vulnerabilities/aws-healthlake-mcp-server-ssrf-flaw-allows/Threat Timesen2026-10-15T04:59:21ZAWS HealthLake MCP Server SSRF Flaw Allows Credential Theft Before 0.0.14https://threattimes.com/category/vulnerabilities/aws-patches-authenticated-sql-injection-flaw-in/Threat Timesen2026-10-15T04:59:21ZAWS patches authenticated SQL injection flaw in open-source mcp-gateway-registryhttps://threattimes.com/category/vulnerabilities/aws-api-mcp-server-patch-fixes-policy-bypass-in/Threat Timesen2026-10-15T04:59:05ZAWS API MCP Server Patch Fixes Policy Bypass in Startup Failurehttps://threattimes.com/category/vulnerabilities/aws-fixes-athena-synapse-connector-flaw-allowing/Threat Timesen2026-10-15T04:58:33ZAWS Fixes Athena Synapse Connector Flaw Allowing Data Leakage via Crafted Table Nameshttps://threattimes.com/category/vulnerabilities/aws-patches-bedrock-agentcore-sdk-flaw-allowing/Threat Timesen2026-10-15T04:58:33ZAWS patches Bedrock AgentCore SDK flaw allowing sandbox command injectionhttps://threattimes.com/category/vulnerabilities/aws-patches-os-command-injection-flaw-in-jsii/Threat Timesen2026-10-15T04:47:16ZAWS patches OS command injection flaw in jsii-diff toolhttps://threattimes.com/category/vulnerabilities/aws-patches-path-traversal-flaw-in-healthomics/Threat Timesen2026-10-15T04:47:16ZAWS patches path traversal flaw in HealthOmics MCP Serverhttps://threattimes.com/category/vulnerabilities/aws-patches-bedrock-agentcore-sdk-flaw-that/Threat Timesen2026-10-15T04:46:59ZAWS patches Bedrock AgentCore SDK flaw that leaked prompts to CloudWatch logshttps://threattimes.com/category/vulnerabilities/aws-patches-silent-record-drop-and-memory-leak-in/Threat Timesen2026-10-15T04:46:36ZAWS patches silent record drop and memory leak in s2n-tls libraryhttps://threattimes.com/category/vulnerabilities/aws-patches-credential-leak-in-strands-agents/Threat Timesen2026-10-15T04:45:51ZAWS patches credential leak in Strands Agents elasticsearch_memory toolhttps://threattimes.com/category/vulnerabilities/aws-fixes-unauthenticated-slowloris-dos-flaw-in/Threat Timesen2026-10-15T04:44:06ZAWS Fixes Unauthenticated Slowloris DoS Flaw in Smithy-RS HTTP Serverhttps://threattimes.com/category/ai/huntress-warns-ai-risks-and-ransomware-shifts/Threat Timesen2026-10-15T04:36:41ZHuntress warns AI risks and ransomware shifts demand tested incident response plans in 2026https://threattimes.com/category/tech/huntress-research-highlights-architectural-limits/Threat Timesen2026-10-15T04:36:41ZHuntress Research Highlights Architectural Limits of Microsoft VSS for Modern Data Protectionhttps://threattimes.com/category/vulnerabilities/cve-2026-108587-unrestricted-file-upload-flaw-in/Threat Timesen2026-10-15T04:29:32Z10Web Booster Plugin Flaw Allows Unauthenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/dockhand-auth-bypass-cve-2026-110130-allows/Threat Timesen2026-10-15T04:26:34ZDockhand Auth Bypass CVE-2026-110130 Allows Remote Account Takeoverhttps://threattimes.com/category/vulnerabilities/vulncheck-finds-joint-advisory-chinese-threat/Threat Timesen2026-10-15T04:26:34ZVulnCheck Finds Joint Advisory Chinese Threat Actor IPs Still Active in May 2026https://threattimes.com/category/tech/sucuri-guide-details-how-500-errors-mask-website/Threat Timesen2026-10-15T04:24:29ZSucuri Guide Details How 500 Errors Mask Website Compromise and Config Failureshttps://threattimes.com/category/malware/recorded-future-research-clarifies-malware-ioc/Threat Timesen2026-10-15T04:03:01ZRecorded Future Research Clarifies Malware IoC Utility and Limitationshttps://threattimes.com/category/vulnerabilities/insikt-group-reports-29-surge-in-high-impact/Threat Timesen2026-10-15T04:03:01ZInsikt Group Reports 29% Surge in High-Impact Vulnerabilities for September 2026https://threattimes.com/category/tech/u-s-government-disrupts-famous-chollima-cyber/Threat Timesen2026-10-15T04:03:01ZU.S. Government Disrupts FAMOUS CHOLLIMA Cyber Operation With CrowdStrike Assistancehttps://threattimes.com/category/ai/nvidia-expands-agentic-computing-investments-in/Threat Timesen2026-10-15T04:02:09ZNVIDIA Expands Agentic Computing Investments in France and UK Startup Ecosystemshttps://threattimes.com/category/cyber-attacks/huntress-details-how-clickfix-and-stolen-cookies/Threat Timesen2026-10-15T04:01:47ZHuntress details how ClickFix and stolen cookies enable rapid BEC attackshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-znuny-tracked-as-cve/Threat Timesen2026-10-15T03:55:16ZCritical Znuny flaw allows header-based login bypass in versions prior to 7.3.7https://threattimes.com/category/ai/higgsfield-integrates-gpt-6-astra-for-extended-ai/Threat Timesen2026-10-15T03:50:22ZHiggsfield Integrates GPT-6 Astra for Extended AI Video Generationhttps://threattimes.com/category/vulnerabilities/bishop-fox-finds-zero-interaction-xss-in-siemens/Threat Timesen2026-10-15T03:46:41ZBishop Fox finds zero-interaction XSS in Siemens Teamcenter login redirecthttps://threattimes.com/category/tech/healthcare-cyberattacks-cost-more-disrupt-patient/Threat Timesen2026-10-15T03:46:41ZHealthcare Cyberattacks Cost More, Disrupt Patient Care, Proofpoint Survey Findshttps://threattimes.com/category/ai/meta-scales-gem-ads-model-to-single-foundation/Threat Timesen2026-10-15T03:45:56ZMeta scales GEM ads model to single foundation for all platformshttps://threattimes.com/category/ai/agent-baseline-publishes-security-reference/Threat Timesen2026-10-15T03:35:28ZAgent Baseline Publishes Security Reference Architecture for Software Factorieshttps://threattimes.com/category/vulnerabilities/critical-severity-sql-injection-flaw-in-wheels/Threat Timesen2026-10-15T03:32:12ZCritical SQL Injection Flaw Found in Wheels Framework Versions Before 4.1.2https://threattimes.com/category/tech/aws-blog-profiles-non-traditional-cybersecurity/Threat Timesen2026-10-15T03:12:47ZAWS Blog Profiles Non-Traditional Cybersecurity Career Paths in New Serieshttps://threattimes.com/category/cyber-attacks/palo-alto-unit-42-analyzes-european-bank-breach/Threat Timesen2026-10-15T03:12:47ZPalo Alto Unit 42 Analyzes European Bank Breach Driven by Third-Party Gapshttps://threattimes.com/category/ai/openai-research-eu-businesses-are-increasingly/Threat Timesen2026-10-15T03:04:12ZOpenAI research: EU businesses are increasingly adopting agentic AI toolshttps://threattimes.com/category/tech/google-deepmind-and-singapore-govtech-deploy-on-2/Threat Timesen2026-10-15T03:04:03ZGoogle DeepMind and Singapore GovTech Deploy On-Device AI for Scam Detectionhttps://threattimes.com/category/tech/google-deepmind-and-singapore-govtech-deploy-on/Threat Timesen2026-10-15T03:04:03ZGoogle DeepMind and Singapore GovTech Deploy On-Device AI to Block Scamshttps://threattimes.com/category/ai/european-cities-deploy-nvidia-ai-agents-for-urban/Threat Timesen2026-10-15T03:04:03ZEuropean Cities Deploy NVIDIA AI Agents for Urban Operations and Planninghttps://threattimes.com/category/tech/nvidia-commits-250m-to-uk-agentic-safety-backs/Threat Timesen2026-10-15T03:04:03ZNVIDIA commits $250M to UK agentic safety, backs five new startupshttps://threattimes.com/category/ai/third-moment-research-runs-10-000-ai-agents-for/Threat Timesen2026-10-15T02:54:31ZThird Moment Research Runs 10,000 AI Agents for 36 Hours Using OpenAI Modelshttps://threattimes.com/category/tech/google-provides-200-european-scientists-with-ai/Threat Timesen2026-10-15T02:54:31ZGoogle provides 200 European scientists with AI compute credits and model accesshttps://threattimes.com/category/ai/wiz-launches-ai-agents-for-fedramp-high/Threat Timesen2026-10-15T02:45:20ZWiz launches AI agents for FedRAMP High government cloud securityhttps://threattimes.com/category/tech/malwarebytes-labs-finds-fake-calendly-pages/Threat Timesen2026-10-15T02:45:20ZMalwarebytes Labs Finds Fake Calendly Pages Stealing Meta and Google Loginshttps://threattimes.com/category/malware/sentinelone-uses-openai-daybreak-to-cut-malware/Threat Timesen2026-10-15T02:45:20ZSentinelOne Uses OpenAI Daybreak to Cut Malware Analysis Time From Weeks to Hourshttps://threattimes.com/category/ai/openai-research-shows-amp-agents-using-gpt-6/Threat Timesen2026-10-15T02:45:13ZOpenAI Research Shows Amp Agents Using GPT-6 Astra and Live Modelshttps://threattimes.com/category/tech/google-frightgeist-reveals-top-halloween-search/Threat Timesen2026-10-15T02:45:13ZGoogle Frightgeist Reveals Top Halloween Search Trends for 2026https://threattimes.com/category/tech/bishop-fox-research-highlights-physical-pen/Threat Timesen2026-10-15T02:32:13ZBishop Fox research highlights physical pen testing for secure meeting roomshttps://threattimes.com/category/vulnerabilities/rapid7-discovers-over-80-vulnerabilities-in/Threat Timesen2026-10-15T02:32:13ZRapid7 Discovers Over 80 Vulnerabilities in Zimbra Collaboration Suitehttps://threattimes.com/category/cyber-attacks/microsoft-disrupts-chinese-language-phishing/Threat Timesen2026-10-15T02:32:13ZMicrosoft Disrupts Chinese-Language Phishing Ecosystem Storm-2990https://threattimes.com/category/tech/socket-adds-dependency-scanning-to-cursors-origin/Threat Timesen2026-10-15T02:32:13ZSocket Adds Dependency Scanning to Cursor’s Origin App Marketplacehttps://threattimes.com/category/tech/cisco-talos-links-uat-6275-to-kazakhstan-targets/Threat Timesen2026-10-15T02:17:43ZCisco Talos Links UAT-6275 to Kazakhstan, Targets CIS Government Agencieshttps://threattimes.com/category/threat-intel/malicious-automation-fled-yandex-infrastructure/Threat Timesen2026-10-15T02:13:50ZMalicious automation fled Yandex infrastructure after strikes, shifting to other networks despite crawler halthttps://threattimes.com/category/cyber-attacks/horizon3-and-torq-publish-brief-on-integrated/Threat Timesen2026-10-15T02:06:59ZHorizon3 and Torq Publish Brief on Integrated Attack Path Remediation and Verificationhttps://threattimes.com/category/vulnerabilities/cortex-xsoar-and-xsiam-users-urged-to-update-to-1/Threat Timesen2026-10-15T01:57:49ZCortex XSOAR and XSIAM Users Urged to Update to 1.0.17 to Fix Admin Command Injectionhttps://threattimes.com/category/ai/texas-mandates-annual-cybersecurity-and-ai/Threat Timesen2026-10-15T01:52:44ZTexas mandates annual cybersecurity and AI training for state and local staffhttps://threattimes.com/category/cyber-attacks/microsoft-health-isac-disrupt-yam-store-phishing/Threat Timesen2026-10-15T01:52:43ZMicrosoft, Health-ISAC Disrupt YAM Store Phishing Marketplace Behind 1 Billion Messageshttps://threattimes.com/category/cyber-attacks/huntress-rmm-abuse-jumps-277-percent-in-2026/Threat Timesen2026-10-15T01:42:10ZHuntress: RMM Abuse Jumps 277 Percent in 2026 Cyber Threat Landscapehttps://threattimes.com/category/cyber-attacks/huntress-research-bec-attacks-cost-businesses-55/Threat Timesen2026-10-15T01:42:10ZHuntress research: BEC attacks cost businesses $55 billion globallyhttps://threattimes.com/category/cyber-attacks/microsoft-and-japan-dismantle-yam-store-phishing/Threat Timesen2026-10-15T01:41:53ZMicrosoft and Japan Dismantle YAM Store Phishing Marketplacehttps://threattimes.com/category/malware/huntress-report-manufacturing-attacks-jumped-to/Threat Timesen2026-10-15T01:28:44ZHuntress Report: Manufacturing Attacks Jumped to 17% of Total Incidents in 2025https://threattimes.com/category/tech/huntress-publishes-guide-to-13-cybersecurity/Threat Timesen2026-10-15T01:28:33ZHuntress Publishes Guide to 13 Cybersecurity Frameworks for 2027https://threattimes.com/category/ai/google-research-unveils-new-ai-capabilities-for/Threat Timesen2026-10-15T01:28:33ZGoogle Research Unveils New AI Capabilities for Health and Science at 2026 Eventhttps://threattimes.com/category/cyber-attacks/huntress-passkeys-fail-if-attackers-target/Threat Timesen2026-10-15T01:20:47ZHuntress: Passkeys Fail If Attackers Target Enrollment and Recovery Flowshttps://threattimes.com/category/ai/socket-ciso-discusses-vendor-trust-and-ai-tooling/Threat Timesen2026-10-15T01:20:13ZSocket CISO Discusses Vendor Trust and AI Tooling Costs on Early Adopters Podcasthttps://threattimes.com/category/vulnerabilities/windows-schannel-vulnerability-cve-2026-105008/Threat Timesen2026-10-15T01:04:58ZWindows Schannel vulnerability CVE-2026-105008 rated CVSS 9.0 allows unauthorized network spoofing attackshttps://threattimes.com/category/tech/epic-games-unveils-ai-assisted-launcher-preview/Threat Timesen2026-10-15T00:51:08ZEpic Games unveils AI-assisted launcher preview targeting Steam speedhttps://threattimes.com/category/ai/wiz-details-aspm-strategy-to-unify-app-security/Threat Timesen2026-10-15T00:32:48ZWiz details ASPM strategy to unify app security scanner datahttps://threattimes.com/category/cloud-security/aws-continuum-for-penetration-testing-automates/Threat Timesen2026-10-15T00:32:48ZAWS Continuum for Penetration Testing Automates Exploitable Vulnerability Checks in CI/CD Pipelineshttps://threattimes.com/category/cyber-attacks/unit-42-reveals-peerstitch-implant-targeting/Threat Timesen2026-10-15T00:32:48ZUnit 42 Reveals PEERSTITCH Implant Targeting FortiGate Firewallshttps://threattimes.com/category/cyber-attacks/threat-actor-uses-ai-framework-to-steal-data-from/Threat Timesen2026-10-14T23:57:16ZThreat Actor Uses AI Framework to Steal Data From South Korean Bankshttps://threattimes.com/category/malware/europol-flags-4-340-urls-as-ransomware-gangs/Threat Timesen2026-10-14T23:13:18ZEuropol flags 4,340 URLs as ransomware gangs escalate attacks with threats against familieshttps://threattimes.com/category/vulnerabilities/palo-alto-networks-checkov-3-3-has-medium/Threat Timesen2026-10-14T23:03:52ZPalo Alto Networks Checkov 3.3 Has Medium Severity Path Traversal Flawhttps://threattimes.com/category/vulnerabilities/cisco-patches-actively-exploited-zero-day-in/Threat Timesen2026-10-14T23:03:52ZCisco patches actively exploited zero-day in Secure Email Gateway applianceshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-gitpython-developers/Threat Timesen2026-10-14T22:57:47ZCritical RCE Flaw in GitPython Allows Remote Code Execution via Refspec Manipulationhttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-6/Threat Timesen2026-10-14T22:57:47ZBetter Auth flaw allows unauthenticated login via OAuth state reusehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-5/Threat Timesen2026-10-14T22:57:47ZBetter Auth CVE-2026-110864 Allows Unauthenticated Account Takeover via OAuth Proxyhttps://threattimes.com/category/vulnerabilities/cve-2026-110867-incorrect-authorization-flaw-in/Threat Timesen2026-10-14T22:57:47ZRenovate vulnerability allows attackers to bypass environment variable restrictionshttps://threattimes.com/category/tech/openai-claims-ex-employee-leaked-device-files-to/Threat Timesen2026-10-14T22:18:01ZOpenAI Claims Ex-Employee Leaked Device Files to Apple in Trade Secret Suithttps://threattimes.com/category/ai/deezer-to-launch-toggle-filtering-ai-generated/Threat Timesen2026-10-14T22:10:03ZDeezer to launch toggle filtering AI-generated music by year-endhttps://threattimes.com/category/tech/apples-folding-iphone-sees-999-out-of-warranty/Threat Timesen2026-10-14T21:52:12ZApple's folding iPhone sees $999 out-of-warranty screen repair costshttps://threattimes.com/category/tech/hackers-exploit-unpatched-refrigeration/Threat Timesen2026-10-14T21:52:12ZHackers Exploit Unpatched Refrigeration Controllers to Disrupt 700 European Supermarketshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-hitachi-vantara-remot/Threat Timesen2026-10-14T21:48:33ZHitachi Vantara Agent Flaw Lets Attackers Forge Tokens for Admin Accesshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-hitachi-vantara-remote/Threat Timesen2026-10-14T21:42:34ZHitachi Vantara Remote Ops Agent Has Critical Password Reset Flawhttps://threattimes.com/category/vulnerabilities/cert-fr-multiples-vuln-rabilit-s-dans-gitlab-12/Threat Timesen2026-10-14T21:40:31ZCERT-FR: Multiples vulnérabilités dans GitLab (12 octobre 2026)https://threattimes.com/category/tech/google-android-silently-links-phone-numbers/Threat Timesen2026-10-14T20:51:45ZGoogle Android Silently Links Phone Numbers Across All Signed-In Accountshttps://threattimes.com/category/tech/modal-raises-750m-series-d-at-15-75b-valuation-as/Threat Timesen2026-10-14T20:49:31ZModal raises $750M Series D at $15.75B valuation as revenue tops $1Bhttps://threattimes.com/category/vulnerabilities/xbow-researchers-chain-three-zero-days-in-chrome/Threat Timesen2026-10-14T20:49:31ZXbow Researchers Chain Three Zero-Days in Chrome Using AI Modelhttps://threattimes.com/category/tech/homepod-mini-2-brings-s10-chip-and-wi-fi-6e-to/Threat Timesen2026-10-14T20:34:17ZHomePod Mini 2 brings S10 chip and Wi-Fi 6E to $149 speaker; AI Siri features wait for updatehttps://threattimes.com/category/vulnerabilities/palo-alto-networks-patches-globalprotect-identity/Threat Timesen2026-10-14T20:13:28ZPalo Alto Networks patches GlobalProtect identity spoofing flaw in PAN-OShttps://threattimes.com/category/tech/apple-homeview-relies-on-iphone-for-third-party/Threat Timesen2026-10-14T20:05:01ZApple HomeView Relies on iPhone for Third-Party App Accesshttps://threattimes.com/category/vulnerabilities/cve-2026-55684-sql-injection-flaw-in/Threat Timesen2026-10-14T19:54:17ZWeGIA 3.8.6 Patch Fixes Critical Unauthenticated SQL Injection Flawhttps://threattimes.com/category/vulnerabilities/aws-security-bulletins-cve-2026-110310-rsa-pkcs-1/Threat Timesen2026-10-14T19:52:06ZAWS Fixes RSA Padding Oracle in S3 Encryption Client for .NEThttps://threattimes.com/category/vulnerabilities/palo-alto-networks-discloses-local-dos-flaw-in/Threat Timesen2026-10-14T19:47:24ZPalo Alto Networks Discloses Local DoS Flaw in Windows GlobalProtect Apphttps://threattimes.com/category/vulnerabilities/palo-alto-networks-issues-fix-for-macos/Threat Timesen2026-10-14T19:47:24ZPalo Alto Networks Issues Fix for macOS GlobalProtect Privilege Escalationhttps://threattimes.com/category/vulnerabilities/palo-alto-networks-addresses-stored-xss-flaw-in/Threat Timesen2026-10-14T19:47:19ZPalo Alto Networks Addresses Stored XSS Flaw in PAN-OS Management Interfacehttps://threattimes.com/category/vulnerabilities/palo-alto-networks-issues-patch-for-medium/Threat Timesen2026-10-14T19:47:19ZPalo Alto Networks Issues Patch for Medium-Severity PAN-OS DoS Vulnerability CVE-2026-0321https://threattimes.com/category/vulnerabilities/labredescefetrj-wegia-sql-injection-flaw-cve-2026-2/Threat Timesen2026-10-14T19:43:51ZLabRedesCefetRJ WeGIA Fixes Critical Unauthenticated SQL Injection Flawhttps://threattimes.com/category/vulnerabilities/labredescefetrj-wegia-sql-injection-flaw-cve-2026/Threat Timesen2026-10-14T19:43:51ZWeGIA 3.8.6 Patch Fixes Critical Unauthenticated SQL Injection Flawhttps://threattimes.com/category/vulnerabilities/palo-alto-networks-fixes-medium-severity-panorama/Threat Timesen2026-10-14T19:35:58ZPalo Alto Networks Fixes Medium-Severity Panorama DoS in CVE-2026-0318https://threattimes.com/category/vulnerabilities/palo-alto-networks-patches-high-severity-chromium/Threat Timesen2026-10-14T19:35:55ZPalo Alto Networks patches high-severity Chromium flaws in Prisma Browser updatehttps://threattimes.com/category/vulnerabilities/palo-alto-networks-addresses-medium-severity/Threat Timesen2026-10-14T19:35:44ZPalo Alto Networks Addresses Medium-Severity Command Injection in PAN-OShttps://threattimes.com/category/vulnerabilities/cve-2026-101337-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T19:30:35ZNLnet Labs releases NSD 4.15.3 to fix high-severity remote code execution flawshttps://threattimes.com/category/vulnerabilities/palo-alto-networks-checkov-ssrf-vulnerability/Threat Timesen2026-10-14T19:13:27ZPalo Alto Networks Checkov SSRF Vulnerability Affects Versions 3.2.0 to 3.2.532https://threattimes.com/category/vulnerabilities/cve-2026-102748-missing-authentication-flaw-in/Threat Timesen2026-10-14T18:56:09ZCritical Unauthenticated Admin Flaw in Dgraph Zero Exposes Control Planehttps://threattimes.com/category/vulnerabilities/databasus-flaw-cve-2026-110770-rated-cvss-9-2/Threat Timesen2026-10-14T18:56:09ZDatabasus Authentication Bypass Lets Attackers Brute-Force Password Resetshttps://threattimes.com/category/cyber-attacks/experts-say-ai-lab-security-failures-not-rogue/Threat Timesen2026-10-14T18:48:15ZExperts say AI lab security failures, not rogue agents, caused recent unauthorized system accesseshttps://threattimes.com/category/malware/hirudo-trojan-bypasses-banking-app-defenses-by/Threat Timesen2026-10-14T18:48:15ZHirudo Trojan Bypasses Banking App Defenses by Injecting Hooks Into Legitimate Codehttps://threattimes.com/category/ai/salience-labs-raises-125m-for-optical-ai/Threat Timesen2026-10-14T18:48:15ZSalience Labs Raises $125M for Optical AI Switching Techhttps://threattimes.com/category/vulnerabilities/aws-security-bulletins-cve-2026-110248-insertion/Threat Timesen2026-10-14T18:42:05ZAWS SageMaker SDK Logs Git Credentials in Plaintext Before Patchhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-stirling/Threat Timesen2026-10-14T18:38:30ZStirling-PDF Patch Fixes Critical SQL Injection Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-110536-os-command-injection-flaw-in-d/Threat Timesen2026-10-14T18:38:30ZD-Link DIR-868L Firmware 2.01b05 Has Critical Remote Command Injection Flawhttps://threattimes.com/category/vulnerabilities/getredash-redash-improper-access-control-flaw-cve/Threat Timesen2026-10-14T18:15:12ZCritical flaw in Redash allows local file read and write via DuckDBhttps://threattimes.com/category/vulnerabilities/cve-2026-102476-flaw-in-eclipse-vert-x-scores-9-1/Threat Timesen2026-10-14T18:15:12ZEclipse Vert.x CVE-2026-102476 Risks Weak SSL Contexts in HTTP Clienthttps://threattimes.com/category/vulnerabilities/e107inc-e107-sql-injection-flaw-cve-2026-55572/Threat Timesen2026-10-14T18:15:12Ze107 CMS Patched Critical Unauthenticated SQL Injection in Alt Auth Pluginhttps://threattimes.com/category/vulnerabilities/critical-severity-insecure-deserialization-flaw-16/Threat Timesen2026-10-14T18:15:12Ze107 CMS Patch Fixes Critical Unauthenticated Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/high-severity-missing-authorization-flaw-in/Threat Timesen2026-10-14T17:58:43ZMicrosoft SharePoint CVE-2026-88164 Allows Remote Privilege Escalation for Authorized Usershttps://threattimes.com/category/vulnerabilities/cve-2026-103415-out-of-bounds-write-flaw-in/Threat Timesen2026-10-14T17:47:29ZEclipse NetX Duo TLS flaw allows critical memory overwrite via server cookiehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-4/Threat Timesen2026-10-14T17:37:18ZUnauthenticated Attackers Can Take Over Juniper Junos OS Devices via J-Web Flawhttps://threattimes.com/category/vulnerabilities/high-severity-code-injection-flaw-in-palo-alto/Threat Timesen2026-10-14T17:37:18ZPalo Alto Networks Patches Authenticated RCE in PAN-OS Management Interfacehttps://threattimes.com/category/vulnerabilities/drupal-core-moderately-critical-cross-site-2/Threat Timesen2026-10-14T17:26:59ZDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015https://threattimes.com/category/vulnerabilities/drupal-core-moderately-critical-cross-site/Threat Timesen2026-10-14T17:26:59ZDrupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016https://threattimes.com/category/vulnerabilities/cve-2026-92152-flaw-in-nasa-fprime-scores-9-3-on/Threat Timesen2026-10-14T17:26:59ZNASA F Prime 4.1.0 Has Critical Remote Code Execution Flaw Fixed in 4.2.0https://threattimes.com/category/vulnerabilities/juniper-networks-junos-os-stack-based-buffer/Threat Timesen2026-10-14T17:26:59ZJuniper Junos OS and Evolved Face Critical Buffer Overflow in Routing Daemonhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-hestiacp/Threat Timesen2026-10-14T17:26:59ZHestia Control Panel Fixes Critical Root Privilege Escalation in Version 1.10.5https://threattimes.com/category/vulnerabilities/cve-2026-101983-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T17:26:59ZJuniper Junos OS and Evolved face critical unauthenticated RCE via J-Web buffer overflowhttps://threattimes.com/category/vulnerabilities/ahsaycbs-hotfixes-address-auth-bypass-and-rce/Threat Timesen2026-10-14T17:20:12ZAhsayCBS Hotfixes Address Auth Bypass and RCE Chain Exploited In-The-Wildhttps://threattimes.com/category/vulnerabilities/critical-severity-stack-based-buffer-overflow-2/Threat Timesen2026-10-14T17:10:50ZJuniper MX Series Routers Face Critical Unauthenticated RCE Flaw in IKE Componenthttps://threattimes.com/category/vulnerabilities/cve-2026-33789-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T17:10:50ZJuniper Networks Junos OS Vulnerable to Critical BGP Buffer Overflow CVE-2026-33789https://threattimes.com/category/vulnerabilities/cve-2026-33792-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T17:10:50ZJuniper SRX Series Faces Critical Unauthenticated Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-stack-based-buffer-overflow/Threat Timesen2026-10-14T17:10:50ZJuniper Junos OS Critical Flaw Allows Root Access via BGP Neighborhttps://threattimes.com/category/vulnerabilities/microsoft-discloses-cve-2026-84012-remote-code/Threat Timesen2026-10-14T17:03:14ZMicrosoft Discloses CVE-2026-84012 Remote Code Execution Flaw in Remote Desktop Serviceshttps://threattimes.com/category/vulnerabilities/cve-2026-102031-os-command-injection-flaw-in/Threat Timesen2026-10-14T16:59:36ZJuniper Junos OS Evolved Faces Critical TACACS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-102175-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:59:36ZJuniper Networks Junos OS Critical Heap Overflow Allows Remote Root Accesshttps://threattimes.com/category/vulnerabilities/cve-2026-102178-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:59:36ZJuniper Junos BGP Flowspec Flaw Rated Critical, Enables Remote Compromisehttps://threattimes.com/category/vulnerabilities/lantronix-xpress-dr-missing-authentication-flaw/Threat Timesen2026-10-14T16:54:50ZLantronix XPress-DR Firmware Has Critical Remote Config Flawhttps://threattimes.com/category/tech/google-waives-25-fee-for-private-ai-studio-apps/Threat Timesen2026-10-14T16:45:58ZGoogle waives $25 fee for private AI Studio apps on Play Storehttps://threattimes.com/category/vulnerabilities/microsoft-october-patch-tuesday-fixes-record-1/Threat Timesen2026-10-14T16:45:58ZMicrosoft October Patch Tuesday Fixes Record 1,413 Flaws, Including Exploited Zero-Dayhttps://threattimes.com/category/vulnerabilities/cve-2026-101950-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:42:37ZJuniper Junos OS Heap Overflow Lets Attackers Crash SRX Firewallshttps://threattimes.com/category/vulnerabilities/cve-2026-101990-stack-based-buffer-overflow-flaw/Threat Timesen2026-10-14T16:42:37ZJuniper CVE-2026-101990: BGP Flow-Spec Buffer Overflow Triggers RCE in Junos OShttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-cisco-secure-email/Threat Timesen2026-10-14T16:31:11ZCISA Adds Cisco Email Gateway Flaw to KEV as Active Exploitation Confirmedhttps://threattimes.com/category/vulnerabilities/cve-2026-77524-improper-privilege-management-flaw/Threat Timesen2026-10-14T16:31:11ZKEDA Flaw Lets Namespace Admins Steal Cluster-Wide Operator Permissionshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-juniper-networks-junos/Threat Timesen2026-10-14T16:31:11ZJuniper Junos OS Critical Integer Underflow Vulnerability Triggers Kernel Crashhttps://threattimes.com/category/vulnerabilities/juniper-networks-junos-os-improper-authentication/Threat Timesen2026-10-14T16:31:11ZJuniper Junos OS J-Web Flaw Allows Unauthenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-101986-improper-authentication-flaw-in/Threat Timesen2026-10-14T16:31:10ZJuniper Junos OS J-Web Flaw Lets Attackers Bypass Authenticationhttps://threattimes.com/category/vulnerabilities/drupal-core-critical-remote-code-execution-sa/Threat Timesen2026-10-14T16:11:03ZDrupal Patches Critical Unauthenticated RCE in Field UI Module for Core Versionshttps://threattimes.com/category/vulnerabilities/cisco-secure-email-gateway-and-secure-email-and/Threat Timesen2026-10-14T16:04:38ZCisco Patches Critical Flaws in Email Gateway, Two Under Active Exploitationhttps://threattimes.com/category/vulnerabilities/critical-severity-improper-authentication-flaw-in-3/Threat Timesen2026-10-14T16:02:10ZZulip Server Patch Fixes Critical Auth Bypass in Versions Before 12.2https://threattimes.com/category/vulnerabilities/dokku-flaw-cve-2026-86002-rated-cvss-9/Threat Timesen2026-10-14T16:02:10ZDokku CVE-2026-86002 Critical Flaw Allows Remote Code Execution via Docker Optionshttps://threattimes.com/category/vulnerabilities/high-severity-path-traversal-flaw-in-c4illin/Threat Timesen2026-10-14T16:01:08ZCisco Fixes Critical File Write Flaw in Secure Email Gatewayhttps://threattimes.com/category/vulnerabilities/cve-2026-91881-flaw-in-dell-terraform-provider/Threat Timesen2026-10-14T15:23:47ZDell Terraform Provider for Redfish has critical certificate validation flawhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-948176-multiple-tls-libraries-can/Threat Timesen2026-10-14T15:15:34ZCERT/CC Reports TLS Libraries Bypass Name Constraint Enforcementhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-410595-google-boringssl-name/Threat Timesen2026-10-14T15:15:34ZGoogle BoringSSL fixes two name constraint bypass flaws in SAN validation logichttps://threattimes.com/category/tech/judge-grants-apple-access-to-openai-hiring-docs/Threat Timesen2026-10-14T15:12:52ZJudge grants Apple access to OpenAI hiring docs in trade secret suithttps://threattimes.com/category/tech/microsoft-october-patch-fixes-1-410-flaws-ends/Threat Timesen2026-10-14T14:33:57ZMicrosoft October Patch Fixes 1,410 Flaws, Ends Windows 11 24H2 Supporthttps://threattimes.com/category/vulnerabilities/cve-2020-37282-os-command-injection-flaw-in/Threat Timesen2026-10-14T14:31:35ZNode.js office-converter Library Exposes Critical Command Injection Flawhttps://threattimes.com/category/vulnerabilities/gravitee-api-management-flaw-cve-2020-37281-rated/Threat Timesen2026-10-14T14:31:35ZGravitee API Management Vulnerability Allows Full Admin Impersonationhttps://threattimes.com/category/vulnerabilities/cve-2026-110612-flaw-in-wwwlike-vlife-scores-9-3/Threat Timesen2026-10-14T14:31:35Zvlife Authentication Bypass Allows Unauthenticated Super Admin Accesshttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authentication-flaw-in-4/Threat Timesen2026-10-14T14:31:35ZNullHub NullClaw Has Critical Auth Bypass Flaw in Versions Through 2026.5.29https://threattimes.com/category/vulnerabilities/critical-severity-server-side-request-forgery-3/Threat Timesen2026-10-14T14:31:35ZKanbn 0.6.0 Vulnerable to Unauthenticated SSRF via Incomplete Fixhttps://threattimes.com/category/vulnerabilities/critical-severity-missing-authentication-flaw-in-3/Threat Timesen2026-10-14T14:31:35ZCritical Flaw in Report One MyReport Updater Allows Remote Code Execution as SYSTEMhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-moghtech-komodo-tracked/Threat Timesen2026-10-14T14:31:35ZKomodo 2.3.3 Authentication Bypass Lets Attackers Execute Root Commandshttps://threattimes.com/category/vulnerabilities/scionoftech-webp-converter-os-command-injection/Threat Timesen2026-10-14T14:31:35ZCritical Command Injection Flaw Found in Node.js webp-converter Libraryhttps://threattimes.com/category/vulnerabilities/danday74-git-diff-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35ZCritical Command Injection Flaw Found in Popular Node.js git-diff Libraryhttps://threattimes.com/category/vulnerabilities/revolunet-pypdftk-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35Zpypdftk Library Critical Command Injection Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/zepspaiva-doc-recog-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35Zdoc-recog Library Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/mborne-extract-os-command-injection-flaw-cve-2026/Threat Timesen2026-10-14T14:31:35ZCritical Command Injection Flaw Found in @mborne/extract Node.js Libraryhttps://threattimes.com/category/vulnerabilities/cve-2026-110640-os-command-injection-flaw-in/Threat Timesen2026-10-14T14:31:35ZWhisper-node 1.1.1 Has Critical Command Injection Flaw Allowing Arbitrary Command Executionhttps://threattimes.com/category/vulnerabilities/chetanxpro-nodejs-whisper-os-command-injection/Threat Timesen2026-10-14T14:31:35ZNodejs-whisper Library Has Critical Command Injection Flawhttps://threattimes.com/category/vulnerabilities/kky-ykk-transcribe2texts-os-command-injection/Threat Timesen2026-10-14T14:31:35Ztranscribe2texts 1.0.6 Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-9/Threat Timesen2026-10-14T14:31:35ZVideo-stitch Library Critical OS Command Injection Flaw Exposes Node.js Process Privilegeshttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-8/Threat Timesen2026-10-14T14:31:35ZBeganovich Snappdf 6.1.0 Fixes Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/shahkashani-stills-os-command-injection-flaw-cve/Threat Timesen2026-10-14T14:31:35ZStills Media Processing Tool Exposes Users to Critical Command Injectionhttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-7/Threat Timesen2026-10-14T14:31:35ZThumbnail Python Package Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/corelight-researchers-detail-windows-kernel-crash/Threat Timesen2026-10-14T14:10:43ZCorelight Researchers Detail Windows Kernel Crash Flaw in CVE-2026-70111https://threattimes.com/category/vulnerabilities/channel-software-weballiance-ecommerce-sql/Threat Timesen2026-10-14T13:51:19ZRapid7 Reveals Critical WebAlliance SQL Injection Allowing Remote Command Execution Without Authhttps://threattimes.com/category/ai/recruiters-cite-identical-ai-resumes-as-top/Threat Timesen2026-10-14T13:41:49ZRecruiters cite identical AI resumes as top stressor in Employ reporthttps://threattimes.com/category/vulnerabilities/tr7-asp-missing-authentication-flaw-cve-2026/Threat Timesen2026-10-14T13:04:13ZTR7 ASP Critical Flaw Allows OS Command Injection Without Authenticationhttps://threattimes.com/category/cyber-attacks/imf-warns-ai-spending-bust-could-trigger-global/Threat Timesen2026-10-14T12:51:19ZIMF warns AI spending bust could trigger global financial instabilityhttps://threattimes.com/category/vulnerabilities/tr7-asp-os-command-injection-flaw-cve-2026-16741/Threat Timesen2026-10-14T12:48:09ZNVD Rates TR7 ASP CVE-2026-16741 Critical 9.8 CVSS for OS Command Injection in Pre-1.6 Fixeshttps://threattimes.com/category/vulnerabilities/cert-cc-vu-166125-bisheng-has-authentication/Threat Timesen2026-10-14T12:44:14ZBisheng LLM Platform Has Critical Auth Bypass, IDOR Flawshttps://threattimes.com/category/tech/jury-awards-qualcomm-just-2-in-damages-against/Threat Timesen2026-10-14T12:36:45ZJury awards Qualcomm just $2 in damages against Arm despite breach verdicthttps://threattimes.com/category/ai/scimplify-raises-25m-to-expand-ai-driven-critical/Threat Timesen2026-10-14T12:36:45ZScimplify raises $25M to expand AI-driven critical materials productionhttps://threattimes.com/category/vulnerabilities/m-a-vinoth-kumar-frontend-dashboard-flaw-cve-2026/Threat Timesen2026-10-14T12:31:40ZCritical Privilege Escalation Flaw Found in Frontend Dashboard Plugin Versions Through 3.0.7https://threattimes.com/category/vulnerabilities/itthinx-affiliates-insecure-deserialization-flaw/Threat Timesen2026-10-14T12:31:40ZCritical Object Injection Flaw Found in itthinx Affiliates Plugin Versions Up to 7.0.1https://threattimes.com/category/vulnerabilities/cve-2026-83910-critical-rpc-runtime-oob-write/Threat Timesen2026-10-14T12:17:01ZCVE-2026-83910: Critical RPC Runtime OOB Write Lets Attackers Execute Code Remotelyhttps://threattimes.com/category/vulnerabilities/microsoft-addresses-windows-dhcp-server-remote/Threat Timesen2026-10-14T12:11:47ZMicrosoft Addresses Windows DHCP Server Remote Code Execution Vulnerabilityhttps://threattimes.com/category/ai/google-launches-gemini-4-argon-with-introductory/Threat Timesen2026-10-14T11:44:41ZGoogle launches Gemini 4 Argon with introductory pricing that doubles in Novemberhttps://threattimes.com/category/cloud-security/apple-researchers-publish-details-on-minions-a/Threat Timesen2026-10-14T11:38:25ZApple Researchers Publish Details on Minions, a Distributed GPU Cloud Using Idle Macshttps://threattimes.com/category/cyber-attacks/doj-arrests-two-us-nationals-in-north-korean/Threat Timesen2026-10-14T11:22:20ZDOJ Arrests Two US Nationals in North Korean Laptop Farm Raidhttps://threattimes.com/category/vulnerabilities/justice-department-announces-coordinated-actions/Threat Timesen2026-10-14T11:03:27ZDOJ Charges 14 in North Korean Remote IT Worker Scheme Affecting 70 US Firmshttps://threattimes.com/category/ai/anthropic-launches-critical-infrastructure/Threat Timesen2026-10-14T11:01:42ZAnthropic launches Critical Infrastructure Defense Program with 11 security partnershttps://threattimes.com/category/vulnerabilities/microsoft-sets-2027-deadline-for-refs-hardening/Threat Timesen2026-10-14T10:47:35ZMicrosoft sets 2027 deadline for ReFS hardening on removable storagehttps://threattimes.com/category/ai/openai-engineer-charged-with-planting-listening/Threat Timesen2026-10-14T10:25:28ZOpenAI engineer charged with planting listening device in executive conference roomhttps://threattimes.com/category/cyber-attacks/huntress-finds-fake-watchguard-site-steals/Threat Timesen2026-10-14T10:07:10ZHuntress Finds Fake WatchGuard Site Steals Credentials Before Serving Real Installerhttps://threattimes.com/category/vulnerabilities/microsoft-patches-windows-smartscreen-privilege/Threat Timesen2026-10-14T09:51:24ZMicrosoft Patches Windows SmartScreen Privilege Escalation Flaw CVE-2026-85851https://threattimes.com/category/vulnerabilities/coruna-and-darksword-exploit-kits-compromise/Threat Timesen2026-10-14T09:35:19ZCoruna and DarkSword exploit kits compromise iPhones via single web visithttps://threattimes.com/category/vulnerabilities/microsoft-outlook-double-free-vulnerability-rated/Threat Timesen2026-10-14T09:35:18ZMicrosoft Outlook Double Free Vulnerability Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/zoom-fixes-high-severity-certificate-flaws-in/Threat Timesen2026-10-14T08:58:22ZZoom Fixes High-Severity Certificate Flaws in Workplace Clientshttps://threattimes.com/category/vulnerabilities/microsoft-windows-search-flaw-cve-2026-105010/Threat Timesen2026-10-14T08:56:24ZMicrosoft Windows Search Flaw CVE-2026-105010 Rated Critical by NVDhttps://threattimes.com/category/vulnerabilities/windows-iscsi-component-suffers-heap-overflow/Threat Timesen2026-10-14T08:56:24ZWindows iSCSI component suffers heap overflow allowing network code execution in CVE-2026-69634https://threattimes.com/category/vulnerabilities/nvd-rates-windows-iscsi-flaw-cve-2026-69705-as/Threat Timesen2026-10-14T08:56:24ZNVD rates Windows iSCSI flaw CVE-2026-69705 as critical 9.8 for unauth RCEhttps://threattimes.com/category/vulnerabilities/ivanti-connect-secure-zero-day-exploited-by/Threat Timesen2026-10-14T08:44:56ZIvanti Connect Secure Zero-Day Exploited by UTA0576 for Root Accesshttps://threattimes.com/category/ai/asml-warns-ai-chip-tool-demand-outpaces-supply/Threat Timesen2026-10-14T08:35:13ZASML warns AI chip tool demand outpaces supply through 2028https://threattimes.com/category/vulnerabilities/critical-severity-information-disclosure-flaw-in/Threat Timesen2026-10-14T08:34:21ZCopart Billing Service Flaw Exposes Customer PII and Financial Datahttps://threattimes.com/category/vulnerabilities/microsoft-discloses-critical-cve-2026-70096-in/Threat Timesen2026-10-14T07:47:33ZMicrosoft Discloses Critical CVE-2026-70096 in Windows Rich Text Edit Controlhttps://threattimes.com/category/vulnerabilities/wpazleen-simpleform-form-maker-to-chat-apps-with/Threat Timesen2026-10-14T07:47:06ZUnauthenticated Privilege Escalation in WordPress SimpleForm Plugin Allows Admin Account Creationhttps://threattimes.com/category/tech/ahold-delhaize-takes-systems-offline-after-cyber/Threat Timesen2026-10-14T07:41:56ZAhold Delhaize Takes Systems Offline After Cyber Incident Hits US, Europehttps://threattimes.com/category/vulnerabilities/microsoft-patches-three-windows-bitlocker-flaws/Threat Timesen2026-10-14T07:23:10ZMicrosoft patches three Windows BitLocker flaws allowing privilege escalationhttps://threattimes.com/category/tech/google-launches-gemini-4-argon-with-1m-token/Threat Timesen2026-10-14T07:23:10ZGoogle Launches Gemini 4 Argon With 1M Token Output and Low Priceshttps://threattimes.com/category/ai/anthropic-warns-self-replicating-ai-botnets-could/Threat Timesen2026-10-14T07:23:10ZAnthropic warns self-replicating AI botnets could hit IoT devices soonhttps://threattimes.com/category/cyber-attacks/anthropic-ai-submitted-fake-murder-tip-to/Threat Timesen2026-10-14T07:23:10ZAnthropic AI Submitted Fake Murder Tip to Philadelphia Police During Testinghttps://threattimes.com/category/tech/ios-27-2-beta-4-introduces-black-and-white-apple/Threat Timesen2026-10-14T07:10:31ZiOS 27.2 Beta 4 Introduces Black-and-White Apple Music Icon and UI Changeshttps://threattimes.com/category/ai/anthropic-warns-small-ai-models-could-self/Threat Timesen2026-10-14T07:10:31ZAnthropic warns small AI models could self-replicate on IoT devices by late 2026https://threattimes.com/category/tech/openai-engineer-arrested-for-hiding-recording/Threat Timesen2026-10-14T07:10:31ZOpenAI engineer arrested for hiding recording device in SF officehttps://threattimes.com/category/ai/openai-engineer-arrested-for-bugging-executive/Threat Timesen2026-10-14T07:10:31ZOpenAI Engineer Arrested for Bugging Executive Conference Room with Audio Recorderhttps://threattimes.com/category/tech/openai-engineer-arrested-for-allegedly-planting/Threat Timesen2026-10-14T07:10:31ZOpenAI Engineer Arrested for Allegedly Planting Bug in Executive Conference Roomhttps://threattimes.com/category/vulnerabilities/critical-severity-sql-injection-flaw-in-jtl-wms/Threat Timesen2026-10-14T07:00:52ZJTL-WMS Critical SQL Injection Flaw Allows Remote Database Manipulationhttps://threattimes.com/category/tech/ionq-acquires-elisity-in-1-3-billion-all-stock/Threat Timesen2026-10-14T06:52:55ZIonQ Acquires Elisity in $1.3 Billion All-Stock Cybersecurity Dealhttps://threattimes.com/category/vulnerabilities/microsoft-rates-openssh-for-windows-use-after/Threat Timesen2026-10-14T06:52:55ZMicrosoft Rates OpenSSH for Windows Use-After-Free Flaw as Criticalhttps://threattimes.com/category/vulnerabilities/microsoft-windows-error-reporting-flaw-rated/Threat Timesen2026-10-14T06:52:55ZMicrosoft Windows Error Reporting Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-powershell-critical-flaw-cve-2026-83578/Threat Timesen2026-10-14T06:48:50ZMicrosoft PowerShell Critical Flaw CVE-2026-83578 Allows Remote Code Execution via Integer Underflowhttps://threattimes.com/category/vulnerabilities/microsoft-windows-text-shaping-flaw-rated/Threat Timesen2026-10-14T06:39:14ZMicrosoft Windows Text Shaping Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-rates-windows-text-shaping-heap/Threat Timesen2026-10-14T06:24:58ZMicrosoft Rates Windows Text Shaping Heap Overflow as Critical CVE-2026-83770https://threattimes.com/category/vulnerabilities/microsoft-windows-partition-driver-flaw-rated/Threat Timesen2026-10-14T06:17:18ZMicrosoft Windows Partition Driver Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-windows-dhcp-server-flaw-rated-critical/Threat Timesen2026-10-14T06:17:18ZMicrosoft Windows DHCP Server Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-ole-flaw-cve-2026-96924-rated-critical/Threat Timesen2026-10-14T06:17:18ZMicrosoft OLE Flaw CVE-2026-96924 Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-outlook-heap-overflow-cve-2026-97016/Threat Timesen2026-10-14T06:17:18ZMicrosoft Outlook Heap Overflow CVE-2026-97016 Rated Critical for Remote Code Executionhttps://threattimes.com/category/data-breaches/crunchbase-data-breach-exposes-559-908-accounts/Threat Timesen2026-10-14T06:04:57ZCrunchbase Confirms Data Exfiltration Following ShinyHunters Extortion Attempthttps://threattimes.com/category/vulnerabilities/microsoft-xml-heap-overflow-vulnerability-rated/Threat Timesen2026-10-14T05:55:48ZMicrosoft XML Heap Overflow Vulnerability Rated Critical 9.8 by NVDhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-windows-libarchive/Threat Timesen2026-10-14T05:42:26ZMicrosoft warns of critical Windows libarchive remote code execution flawhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-cve-2026-85792-in/Threat Timesen2026-10-14T05:37:39ZMicrosoft Confirms Critical CVE-2026-85792 in Windows RRAS Servicehttps://threattimes.com/category/vulnerabilities/microsoft-discloses-critical-windows-imaging/Threat Timesen2026-10-14T05:18:59ZMicrosoft Discloses Critical Windows Imaging Component Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-windows-iscsi-flaw-rated-critical-for/Threat Timesen2026-10-14T05:18:59ZMicrosoft Windows iSCSI Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-critical-iis-buffer-overflow-flaw/Threat Timesen2026-10-14T05:18:17ZMicrosoft: Critical IIS Buffer Overflow Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-postscript-printer-driver-flaw-rated/Threat Timesen2026-10-14T04:39:23ZMicrosoft PostScript Printer Driver Flaw Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-rce-flaw-found-in-microsoft-postscript/Threat Timesen2026-10-14T04:39:23ZCritical RCE Flaw Found in Microsoft PostScript Printer Driverhttps://threattimes.com/category/vulnerabilities/microsoft-windows-system-info-console-has/Threat Timesen2026-10-14T04:38:28ZMicrosoft Windows System Info Console Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-outlook-critical-rce-flaw-cve-2026/Threat Timesen2026-10-14T04:18:21ZMicrosoft Outlook Critical RCE Flaw CVE-2026-70242 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-exchange-server-flaw-cve-2026-70279/Threat Timesen2026-10-14T04:18:21ZMicrosoft Exchange Server Flaw CVE-2026-70279 Rated Critical for Network Spoofinghttps://threattimes.com/category/vulnerabilities/microsoft-outlook-has-critical-remote-code/Threat Timesen2026-10-14T04:18:21ZMicrosoft Outlook Has Critical Remote Code Execution Flaw CVE-2026-70291https://threattimes.com/category/vulnerabilities/cve-2026-104800-unrestricted-file-upload-flaw-in/Threat Timesen2026-10-14T03:52:21ZWordPress AGE-GATE Plugin Has Critical Unauthenticated Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-unrestricted-file-upload-flaw-4/Threat Timesen2026-10-14T03:52:21ZCritical WordPress Plugin Flaw Allows Unauthenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-word-critical-rce-vulnerability-cve/Threat Timesen2026-10-14T03:41:52ZMicrosoft Word Critical RCE Vulnerability CVE-2026-70300 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-cve-2026-83519-critical-windows-error/Threat Timesen2026-10-14T03:41:52ZMicrosoft CVE-2026-83519: Critical Windows Error Reporting Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-windows-media-foundation-has-critical-2/Threat Timesen2026-10-14T03:41:52ZMicrosoft Windows Media Foundation Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-windows-error-reporting-flaw-allows/Threat Timesen2026-10-14T03:19:39ZCritical Windows Error Reporting Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-remote-code-execution-3/Threat Timesen2026-10-14T03:19:39ZMicrosoft Confirms Critical Remote Code Execution Flaw in Windows Error Reportinghttps://threattimes.com/category/vulnerabilities/oss-security-mailing-list-cve-2026-74580-linux/Threat Timesen2026-10-14T03:11:20ZVghost Flaw in Linux vhost Allows Local Privilege Escalation and VM Escapehttps://threattimes.com/category/tech/google-play-store-adds-personal-library-for-ai/Threat Timesen2026-10-14T03:11:00ZGoogle Play Store adds personal library for AI-generated Android appshttps://threattimes.com/category/vulnerabilities/microsoft-discloses-critical-remote-code/Threat Timesen2026-10-14T03:02:38ZMicrosoft Discloses Critical Remote Code Execution Flaw in Windows CCFFilter Driverhttps://threattimes.com/category/vulnerabilities/microsoft-documents-critical-windows-shell-remote/Threat Timesen2026-10-14T03:02:38ZMicrosoft Documents Critical Windows Shell Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-sql-injection-flaw-in-tyche/Threat Timesen2026-10-14T02:42:07ZAbandoned Cart Pro Plugin Vulnerable to Critical SQL Injection Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-unrestricted-file-upload-flaw-3/Threat Timesen2026-10-14T02:42:07ZSnazzy Social Media Feed CVE-2026-110002: CVSS 9.8 Critical PHP Upload Flaw in v2.5https://threattimes.com/category/vulnerabilities/tyche-softwares-abandoned-cart-pro-for/Threat Timesen2026-10-14T02:42:07ZAbandoned Cart Pro Plugin Flaw Enables Full Account Takeover on WordPress Siteshttps://threattimes.com/category/vulnerabilities/critical-severity-os-command-injection-flaw-in-6/Threat Timesen2026-10-14T02:42:06ZCollabora Online Built-in CODE Server Flaw Exploited in Wildhttps://threattimes.com/category/vulnerabilities/microsoft-cve-2026-83862-windows-nlb-remote-code/Threat Timesen2026-10-14T02:38:52ZMicrosoft CVE-2026-83862: Windows NLB Remote Code Execution Flaw Rated Criticalhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-dns-server-flaw/Threat Timesen2026-10-14T02:38:52ZMicrosoft Confirms Critical DNS Server Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-remote-code-execution-2/Threat Timesen2026-10-14T02:26:11ZMicrosoft Confirms Critical Remote Code Execution Flaw in PPP EAP-TLS Protocolhttps://threattimes.com/category/vulnerabilities/microsoft-nps-remote-code-execution-flaw-rated/Threat Timesen2026-10-14T02:01:05ZMicrosoft NPS Remote Code Execution Flaw Rated Criticalhttps://threattimes.com/category/vulnerabilities/microsoft-windows-media-foundation-has-critical/Threat Timesen2026-10-14T02:00:44ZMicrosoft Windows Media Foundation Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-remote-code-execution-2/Threat Timesen2026-10-14T02:00:44ZMicrosoft warns of critical remote code execution flaw in Windows RRAShttps://threattimes.com/category/vulnerabilities/samsung-open-source-qa-board-os-command-injection/Threat Timesen2026-10-14T01:55:53ZSamsung Open Source QA-Board Has Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/microsoft-advises-on-critical-windows-schannel/Threat Timesen2026-10-14T01:38:50ZMicrosoft Advises on Critical Windows Schannel Spoofing Vulnerability CVE-2026-85818https://threattimes.com/category/vulnerabilities/microsoft-windows-volume-manager-driver-has/Threat Timesen2026-10-14T01:38:50ZMicrosoft Windows Volume Manager Driver Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-click-to/Threat Timesen2026-10-14T01:31:45ZCritical Shortcode Execution Flaw Found in Click to Chat for WhatsApp Pluginhttps://threattimes.com/category/vulnerabilities/critical-severity-unrestricted-file-upload-flaw-2/Threat Timesen2026-10-14T01:31:45ZPrintcart Store Plugin Vulnerable to Critical Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-rce-flaw-in-windows/Threat Timesen2026-10-14T01:23:25ZMicrosoft Confirms Critical RCE Flaw in Windows Failover Clusterhttps://threattimes.com/category/vulnerabilities/microsoft-outlook-cve-2026-88156-rated-critical/Threat Timesen2026-10-14T01:23:25ZMicrosoft Outlook CVE-2026-88156 Rated Critical for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-remote-code-execution-flaw-found-in/Threat Timesen2026-10-14T01:00:54ZCritical Remote Code Execution Flaw Found in Microsoft Office PowerPointhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-remote-code-execution/Threat Timesen2026-10-14T01:00:38ZMicrosoft warns of critical remote code execution flaw in Windows DNS Serverhttps://threattimes.com/category/vulnerabilities/microsoft-confirms-critical-remote-code-execution/Threat Timesen2026-10-14T00:40:31ZMicrosoft Confirms Critical Remote Code Execution Flaw in Windows Media Playerhttps://threattimes.com/category/vulnerabilities/microsoft-lsass-flaw-cve-2026-96219-rated/Threat Timesen2026-10-14T00:40:31ZMicrosoft LSASS Flaw CVE-2026-96219 Rated Critical by NVD for Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-october-patch-tuesday-fixes-1-415-flaws/Threat Timesen2026-10-14T00:37:45ZMicrosoft October Patch Tuesday Fixes 1,415 Flaws Including Exploited Shell Zero-Dayhttps://threattimes.com/category/vulnerabilities/microsoft-windows-dhcp-server-has-critical-remote/Threat Timesen2026-10-14T00:22:21ZMicrosoft Windows DHCP Server Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-warns-of-critical-double-free-flaw-in/Threat Timesen2026-10-14T00:20:56ZMicrosoft Warns of Critical Double Free Flaw in Failover Cluster Driverhttps://threattimes.com/category/vulnerabilities/microsoft-releases-1-413-patches-for-october-2026/Threat Timesen2026-10-14T00:20:41ZMicrosoft Releases 1,413 Patches for October 2026, Including Three Zero-Day Flawshttps://threattimes.com/category/ai/google-deepmind-releases-gemini-4-argon-for/Threat Timesen2026-10-13T23:48:38ZGoogle DeepMind Releases Gemini 4 Argon for Robotics Controlhttps://threattimes.com/category/ai/openai-engineer-arrested-for-planting-recording/Threat Timesen2026-10-13T22:56:42ZOpenAI engineer arrested for planting recording device in executive conference roomhttps://threattimes.com/category/vulnerabilities/actively-exploited-microsoft-windows-bug-cve-2026/Threat Timesen2026-10-13T22:37:46ZMicrosoft patches exploited Windows Shell zero-day CVE-2026-96951 in October updatehttps://threattimes.com/category/vulnerabilities/google-chrome-releases-extended-stable-update-for/Threat Timesen2026-10-13T21:53:08ZGoogle Deploys Chrome 155 and 152 Updates to Patch Multiple Critical Flawshttps://threattimes.com/category/vulnerabilities/microsoft-ad-fs-has-critical-spoofing-flaw-cve/Threat Timesen2026-10-13T21:23:14ZMicrosoft AD FS Has Critical Spoofing Flaw CVE-2026-96252https://threattimes.com/category/vulnerabilities/legacyupdate-flaw-cve-2026-97381-rated-cvss-9-9/Threat Timesen2026-10-13T21:19:22ZLegacy Update ActiveX Flaw Lets Attackers Install Updates and Restart PCshttps://threattimes.com/category/vulnerabilities/cisco-ucs-and-ucs-based-appliances-uefi-shell/Threat Timesen2026-10-13T21:06:09ZCisco Fixes UEFI Secure Boot Bypass in UCS Servers and Applianceshttps://threattimes.com/category/vulnerabilities/cve-2026-70035-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:56:52ZMicrosoft Patches High-Severity .NET Framework Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes-4/Threat Timesen2026-10-13T20:56:52ZMicrosoft patches high-severity deadlock flaw in ASP.NET Core Kestrelhttps://threattimes.com/category/vulnerabilities/cve-2026-96230-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:53:23ZMicrosoft Patches High-Severity Cross-Site Scripting Flaw in ASP.NET Core Blazor WebAssembly Serverhttps://threattimes.com/category/vulnerabilities/cve-2026-96225-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:53:23ZMicrosoft patches high-severity .NET symlink vulnerability on Linux and macOShttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-6/Threat Timesen2026-10-13T20:53:23ZMicrosoft patches high-severity .NET Framework out-of-bounds write flaw CVE-2026-70007https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-5/Threat Timesen2026-10-13T20:53:23ZMicrosoft .NET WPF Vulnerability CVE-2026-96224 Allows Remote Code Execution via Pixel Shadershttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-aspnetcore-2/Threat Timesen2026-10-13T20:53:23ZMicrosoft Patches High-Severity Privilege Escalation in ASP.NET Core Negotiate Authhttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-4/Threat Timesen2026-10-13T20:53:23ZMicrosoft Issues Patch for High-Severity .NET Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/microsoft-sql-server-2017-gdr-heap-based-buffer/Threat Timesen2026-10-13T20:51:18ZMicrosoft SQL Server Faces High-Severity Heap Overflow Flaw in CVE-2026-94512https://threattimes.com/category/vulnerabilities/cve-2026-65674-insecure-deserialization-flaw-in/Threat Timesen2026-10-13T20:51:18ZMicrosoft SQL Server Faces High-Severity Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-96959-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:50:19ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-96959https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-3/Threat Timesen2026-10-13T20:50:19ZMicrosoft patches high severity out-of-bounds read flaw in .NET Windows Desktop runtimehttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop-2/Threat Timesen2026-10-13T20:50:19ZMicrosoft patches high-severity .NET elevation of privilege flaw in Windows Desktop Runtimehttps://threattimes.com/category/vulnerabilities/microsoft-windowsdesktop-app-runtime-win-arm64/Threat Timesen2026-10-13T20:50:19ZMicrosoft Patches High-Severity .NET RCE Vulnerability CVE-2026-83520https://threattimes.com/category/vulnerabilities/cve-2026-70174-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:50:19ZMicrosoft Patches High-Severity .NET Remote Code Execution Flaw CVE-2026-70174https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-windowsdesktop/Threat Timesen2026-10-13T20:47:17ZMicrosoft Patches High-Severity .NET WPF Remote Code Execution Flaw CVE-2026-96235https://threattimes.com/category/vulnerabilities/microsoft-netcore-app-runtime-linux-arm-fixes-2/Threat Timesen2026-10-13T20:47:17ZMicrosoft patches high-severity .NET privilege escalation flaw on Linux and macOShttps://threattimes.com/category/vulnerabilities/cve-2026-96222-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:47:17ZMicrosoft patches high-severity AD FS spoofing flaw in .NET crypto libraryhttps://threattimes.com/category/vulnerabilities/saudi-national-arrested-for-installing/Threat Timesen2026-10-13T20:47:17ZOpenAI Engineer Arrested for Planting Audio Bug in Executive Conference Roomhttps://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes-3/Threat Timesen2026-10-13T20:44:05ZMicrosoft Fixes Critical HTTP Request Smuggling Flaw in ASP.NET Corehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-input-validation-flaw-2/Threat Timesen2026-10-13T20:41:02ZAdobe ColdFusion Critical Flaw Allows Remote Code Execution Without User Interactionhttps://threattimes.com/category/vulnerabilities/cve-2026-85886-heap-based-buffer-overflow-flaw-in/Threat Timesen2026-10-13T20:41:02ZMicrosoft SQL Server Heap Overflow Allows Authenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-5/Threat Timesen2026-10-13T20:41:02ZMicrosoft Patches High-Severity CVE-2026-68883 Heap Overflow in SQL Server 2017-2022https://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-4/Threat Timesen2026-10-13T20:41:02ZMicrosoft SQL Server Heap Overflow Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-sql-server-2017-gdr-stack-based-buffer/Threat Timesen2026-10-13T20:41:02ZMicrosoft SQL Server Has High-Severity Privilege Escalation Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-106624-code-injection-flaw-in-adobe/Threat Timesen2026-10-13T20:41:02ZAdobe ColdFusion 2023 and 2025 face critical zero-click code injection flawhttps://threattimes.com/category/vulnerabilities/critical-severity-server-side-request-forgery-2/Threat Timesen2026-10-13T20:41:02ZAdobe ColdFusion Faces Critical SSRF Flaw Allowing Unauthenticated Privilege Escalationhttps://threattimes.com/category/vulnerabilities/cve-2026-70188-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:41:02ZMicrosoft patches critical HTTP smuggling flaw in ASP.NET Core Kestrelhttps://threattimes.com/category/vulnerabilities/cve-2026-96236-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:37:36ZMicrosoft patches high-severity denial-of-service flaw in ASP.NET Core localizationhttps://threattimes.com/category/vulnerabilities/cve-2026-70197-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:37:36ZMicrosoft Patches .NET Out-of-Bounds Write Flaw in System.Net.Socketshttps://threattimes.com/category/ai/google-rolls-out-gemini-4-argon-with-new-frontier/Threat Timesen2026-10-13T20:36:48ZGoogle Rolls Out Gemini 4 Argon With New Frontier Safety Guardrailshttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-netcore-app/Threat Timesen2026-10-13T20:34:37ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-69651https://threattimes.com/category/vulnerabilities/system-security-cryptography-xml-fixes-high/Threat Timesen2026-10-13T20:27:50ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-96960https://threattimes.com/category/vulnerabilities/cve-2026-96233-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:27:50ZMicrosoft patches high-severity denial-of-service flaw in .NET Core runtimehttps://threattimes.com/category/vulnerabilities/critical-severity-improper-access-control-flaw-in/Threat Timesen2026-10-13T20:23:03ZCritical gRPC Access Control Bypass Found in IBM WebSphere Libertyhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-ibm-websphere/Threat Timesen2026-10-13T20:23:03ZIBM WebSphere Liberty Faces Critical Authentication Bypass in SAML Featurehttps://threattimes.com/category/vulnerabilities/xorbitsai-xoscar-insecure-deserialization-flaw/Threat Timesen2026-10-13T20:23:03ZXorbits Xoscar 0.11.2 Has Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/critical-severity-path-traversal-flaw-in-adobe/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Critical Path Traversal Flaw Exposes Sensitive Fileshttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-adobe-2/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Faces Critical Code Injection Flaw CVE-2026-106621https://threattimes.com/category/vulnerabilities/adobe-coldfusion-2025-unrestricted-file-upload/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Critical Upload Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in-4/Threat Timesen2026-10-13T20:23:03ZCritical ColdFusion Auth Flaw Allows Arbitrary Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-106620-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T20:23:03ZCritical ColdFusion Auth Bypass Grants Write Access to Low-Privilege Attackershttps://threattimes.com/category/vulnerabilities/cve-2026-75994-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Faces Critical Auth Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-code-injection-flaw-in-adobe/Threat Timesen2026-10-13T20:23:03ZAdobe ColdFusion Critical Code Injection Flaw Allows Remote Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-96958-microsoft-security-advisory-cve/Threat Timesen2026-10-13T20:09:15ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-96958https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-system-security/Threat Timesen2026-10-13T20:05:49ZMicrosoft Patches High-Severity .NET Denial of Service Flaw CVE-2026-84008https://threattimes.com/category/vulnerabilities/microsoft-netcore-app-runtime-linux-arm-fixes/Threat Timesen2026-10-13T20:02:53ZMicrosoft Patches High-Severity .NET Denial of Service Vulnerability CVE-2026-58280https://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes-2/Threat Timesen2026-10-13T20:02:53ZMicrosoft Patches Race Condition in ASP.NET Core to Fix Privilege Escalationhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-microsoft-native-quic/Threat Timesen2026-10-13T19:59:20ZMicrosoft patches critical QUIC remote code execution flaw in .NET packageshttps://threattimes.com/category/vulnerabilities/microsoft-365-apps-for-enterprise-heap-based-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft Office Access Heap Overflow Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-3/Threat Timesen2026-10-13T19:56:09ZMicrosoft Office Access Heap Overflow Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/high-severity-code-injection-flaw-in-microsoft-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft Fixes High-Severity Code Injection in Visual Studio Toolshttps://threattimes.com/category/vulnerabilities/microsoft-visual-studio-code-flaw-cve-2026-102235/Threat Timesen2026-10-13T19:56:09ZVisual Studio Code Patch Fixes High-Severity Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-70098-missing-authorization-flaw-in/Threat Timesen2026-10-13T19:56:09ZVisual Studio Code Patch Fixes High-Severity Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-102855-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-13T19:56:09ZMicrosoft Office Visio Heap Overflow Allows Unauthenticated Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-sharepoint-server-subscription-edition-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Missing Authorization Flaw Allows Remote Privilege Escalationhttps://threattimes.com/category/vulnerabilities/cve-2026-102860-improper-access-control-flaw-in/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Server Has High-Severity Privilege Escalation Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-102858-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-13T19:56:09ZMicrosoft OneNote Heap Buffer Overflow Vulnerability Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in-2/Threat Timesen2026-10-13T19:56:09ZHigh-Severity Heap-Based Buffer Overflow Flaw in Microsoft 365 Apps for Enterprise Tracked as CVE-2026-102857https://threattimes.com/category/vulnerabilities/high-severity-heap-based-buffer-overflow-flaw-in/Threat Timesen2026-10-13T19:56:09ZMicrosoft Visio Flaw CVE-2026-102856 Allows Remote Code Execution via Heap Overflowhttps://threattimes.com/category/vulnerabilities/microsoft-sharepoint-server-subscription-edition/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Has High-Severity Privilege Escalation Flaw CVE-2026-102866https://threattimes.com/category/vulnerabilities/cve-2026-102863-code-injection-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Code Injection Flaw CVE-2026-102863 Rated High Severityhttps://threattimes.com/category/vulnerabilities/high-severity-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T19:56:09ZMicrosoft SharePoint Flaw CVE-2026-102862 Allows Authorized Users to Elevate Privilegeshttps://threattimes.com/category/vulnerabilities/high-severity-code-injection-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Fixes Code Injection Flaw in ASP.NET Core Debuggerhttps://threattimes.com/category/vulnerabilities/cve-2026-100212-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Excel Use-After-Free Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-100211-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Excel Use-After-Free Flaw CVE-2026-100211 Rated High Severityhttps://threattimes.com/category/vulnerabilities/microsoft-365-apps-for-enterprise-heap-based/Threat Timesen2026-10-13T19:56:09ZMicrosoft Rates Excel Heap Overflow as High Severity in Latest Advisoryhttps://threattimes.com/category/vulnerabilities/high-severity-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Excel Use-After-Free Flaw CVE-2026-100209 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1607-heap-based/Threat Timesen2026-10-13T19:56:09ZMicrosoft Windows Media Video Decoder Buffer Overflow Rated High Severityhttps://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1607-use-after-free-2/Threat Timesen2026-10-13T19:56:09ZMicrosoft Remote Desktop Gateway Use-After-Free Flaw Rated High Severityhttps://threattimes.com/category/vulnerabilities/microsoft-dynamics-nav-2017-insecure/Threat Timesen2026-10-13T19:56:09ZMicrosoft Dynamics NAV Flaw CVE-2026-100214 Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-102203-type-confusion-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft RPC Runtime Flaw CVE-2026-102203 Enables Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-102214-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZMicrosoft Addresses High-Severity Hyper-V Use-After-Free Flaw in Windowshttps://threattimes.com/category/vulnerabilities/cve-2026-102869-type-confusion-flaw-in-microsoft/Threat Timesen2026-10-13T19:56:09ZCVE-2026-102869 Type Confusion Flaw in .NET and Visual Studio Enables Privilege Elevationhttps://threattimes.com/category/vulnerabilities/microsoft-dynamics-nav-2018-path-traversal-flaw/Threat Timesen2026-10-13T19:56:09ZMicrosoft Dynamics NAV 2018 Path Traversal Flaw Rated High Severityhttps://threattimes.com/category/vulnerabilities/cve-2026-102225-out-of-bounds-read-flaw-in/Threat Timesen2026-10-13T19:56:09ZWindows Text Shaping Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-102217-flaw-in-microsoft-windows-10/Threat Timesen2026-10-13T19:56:09ZMicrosoft WebDAV Path Flaw Allows Network Privilege Escalationhttps://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-aspnetcore/Threat Timesen2026-10-13T19:56:09ZMicrosoft Patches High-Severity SignalR Denial of Service Flaw CVE-2026-70159https://threattimes.com/category/vulnerabilities/microsoft-aspnetcore-app-runtime-linux-arm-fixes/Threat Timesen2026-10-13T19:56:09ZMicrosoft patches high-severity ASP.NET Core privilege escalation flaw CVE-2026-70175https://threattimes.com/category/vulnerabilities/high-severity-flaw-in-microsoft-aspnetcore-app/Threat Timesen2026-10-13T19:56:09ZMicrosoft patches high-severity ASP.NET Core denial of service flaw CVE-2026-70181https://threattimes.com/category/vulnerabilities/zero-day-initiative-zdi-26-754-0day-genesis-world/Threat Timesen2026-10-13T19:56:09ZZDI Discloses Three Unpatched Genesis World Flaws Including Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-63158-flaw-in-omnispace-agora-project/Threat Timesen2026-10-13T19:54:53ZOmnispace Agora Project Authentication Bypass Allows Hash Replay Attackshttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-omnispace-agora-project-2/Threat Timesen2026-10-13T19:54:53ZOmnispace Agora Project Vulnerability Allows Account Takeover via Predictable Tokenshttps://threattimes.com/category/vulnerabilities/cve-2026-63160-flaw-in-omnispace-agora-project/Threat Timesen2026-10-13T19:54:53ZOmnispace Agora Project Critical Flaw Exposes Plaintext Auth Tokenshttps://threattimes.com/category/vulnerabilities/omnispace-agora-project-code-injection-flaw-cve/Threat Timesen2026-10-13T19:43:46ZAgora Project Flaw Allows Unauthenticated Remote Code Execution Before Version 26.10.0https://threattimes.com/category/vulnerabilities/critical-severity-improper-input-validation-flaw/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Faces Critical CVE-2026-106626 Code Execution Riskhttps://threattimes.com/category/vulnerabilities/cve-2026-106629-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Has Critical Stored XSS Flaw CVE-2026-106629https://threattimes.com/category/vulnerabilities/cve-2026-106630-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Faces Critical Stored XSS Flaw CVE-2026-106630https://threattimes.com/category/vulnerabilities/cve-2026-83662-cross-site-scripting-flaw-in-adobe/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Critical XSS Flaw CVE-2026-83662 Requires User Interactionhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-omnispace-agora-project/Threat Timesen2026-10-13T19:43:46ZOmnispace Agora Project Has Critical Password Prediction Flaw Before 26.10.0https://threattimes.com/category/vulnerabilities/cve-2026-103848-os-command-injection-flaw-in/Threat Timesen2026-10-13T19:43:46ZAdobe Experience Manager Faces Critical OS Command Injection Flawhttps://threattimes.com/category/vulnerabilities/adobe-experience-manager-6-5-improper-input/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Critical Flaw Allows Code Execution Without User Interactionhttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in-3/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Faces Critical Authorization Flaw Allowing Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-48383-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Faces Critical Authorization Flaw Allowing Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in-2/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Vulnerability Allows Code Execution Without Interactionhttps://threattimes.com/category/vulnerabilities/critical-severity-xml-external-entity-flaw-in/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager XXE Flaw CVE-2026-90531 Allows Privilege Escalationhttps://threattimes.com/category/vulnerabilities/cve-2026-90532-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T19:43:45ZAdobe Experience Manager Has Critical Authorization Flaw CVE-2026-90532https://threattimes.com/category/vulnerabilities/cve-2026-104252-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T19:38:00ZVitess Fixes Critical Cross-Site Scripting Flaw in Debug Endpointshttps://threattimes.com/category/vulnerabilities/cert-cc-vu-456950-komodo-periphery-agent-contains/Threat Timesen2026-10-13T19:31:07ZKomodo Periphery Agent Patch Fixes Root Command Injection Flawhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-382143-lowcoder-query-library-api/Threat Timesen2026-10-13T19:27:49ZCERT/CC: VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltrationhttps://threattimes.com/category/vulnerabilities/cve-2026-102238-path-traversal-flaw-in-microsoft/Threat Timesen2026-10-13T19:25:53ZVisual Studio Code Path Traversal Flaw Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/oss-security-mailing-list-xen-security-advisory/Threat Timesen2026-10-13T19:14:57ZXen and Citrix Address Multiple Vulnerabilities in Latest Security Advisorieshttps://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1607-use-after-free/Threat Timesen2026-10-13T19:14:57ZMicrosoft Windows Message Queuing Flaw Allows Critical Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cve-2026-100222-heap-based-buffer-overflow-flaw/Threat Timesen2026-10-13T19:14:57ZMicrosoft NPS Heap Overflow Allows Remote Code Execution on Windowshttps://threattimes.com/category/vulnerabilities/cve-2026-100219-use-after-free-flaw-in-microsoft/Threat Timesen2026-10-13T19:14:57ZMicrosoft QUIC Use-After-Free Flaw Rated Critical 9.8 on Windows 11https://threattimes.com/category/vulnerabilities/microsoft-windows-10-version-1809-heap-based/Threat Timesen2026-10-13T19:14:57ZWindows Text Shaping Buffer Overflow Allows Remote Code Executionhttps://threattimes.com/category/tech/apple-seeds-fourth-ios-27-2-and-macos-golden-gate/Threat Timesen2026-10-13T18:37:21ZApple Seeds Fourth iOS 27.2 and macOS Golden Gate 27.2 Developer Betashttps://threattimes.com/category/vulnerabilities/cert-cc-vu-573195-go-openssl-apple-libressl-pyca/Threat Timesen2026-10-13T18:34:32ZCERT/CC Flags Name-Constraint Inconsistencies in Go, OpenSSL, and Other TLS Librarieshttps://threattimes.com/category/vulnerabilities/opentext-endpoint-investigator-flaw-cve-2026/Threat Timesen2026-10-13T18:32:15ZOpenText EnCase Agents Vulnerable to Unauthorized Activity in CVE-2026-75120https://threattimes.com/category/vulnerabilities/cve-2026-100133-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce and Magento Open Source Hit by Critical Stored XSS Flawhttps://threattimes.com/category/vulnerabilities/adobe-commerce-improper-input-validation-flaw-cve/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce Critical Flaw CVE-2026-92464 Enables Remote Code Executionhttps://threattimes.com/category/vulnerabilities/critical-severity-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce, Magento Open Source Hit by Critical Stored XSS Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-92909-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce, Magento Open Source Hit by Critical Remote Code Execution Flawhttps://threattimes.com/category/vulnerabilities/cve-2026-103849-flaw-in-adobe-commerce-scores-10/Threat Timesen2026-10-13T18:32:15ZAdobe Commerce Critical Vulnerability Allows Remote Code Executionhttps://threattimes.com/category/vulnerabilities/cert-cc-vu-157374-xss-vulnerability-in-shopware-6/Threat Timesen2026-10-13T18:22:03ZShopware 6.7 XSS Flaw Allows Admin Token Theft and Remote Code Executionhttps://threattimes.com/category/tech/meta-launches-audio-only-ray-ban-glasses-without/Threat Timesen2026-10-13T18:19:33ZMeta Launches Audio-Only Ray-Ban Glasses Without Cameras to Address Privacy Concernshttps://threattimes.com/category/tech/github-deploys-context-aware-model-to-cut-secret/Threat Timesen2026-10-13T18:19:33ZGitHub Deploys Context-Aware Model to Cut Secret Scan Time by 86 Percenthttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-jfrog-cli-tracked-as/Threat Timesen2026-10-13T17:58:28ZCritical Code Execution Flaw Found in JFrog CLI Through Version 2.126.0https://threattimes.com/category/vulnerabilities/fortiguard-psirt-arbitrary-command-execution-in/Threat Timesen2026-10-13T17:48:30ZFortiManager Daemon Vulnerability Allows Remote Code Execution via Cluster Impersonationhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-sql-command-injection-in-webmail/Threat Timesen2026-10-13T17:48:30ZFortiGuard Revises FortiMail SQLi Advisory: Authenticated Attackers Can Execute Code via Webmailhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-persistent-denial-of-service-in/Threat Timesen2026-10-13T17:48:30ZFortinet FortiSandbox Flaw Allows Persistent GUI and CLI Denial of Servicehttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-improper-access-control-and/Threat Timesen2026-10-13T17:48:30ZFortiSandbox GUI Bypass Flaw Rated 9.6 Allows Unauthenticated Accesshttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-html-injection-in-webui/Threat Timesen2026-10-13T17:48:30ZFortinet Fixes HTML Injection Flaw in FortiManager and FortiAnalyzer Web Interfaceshttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-gui-denial-of-service/Threat Timesen2026-10-13T17:48:30ZFortiNet GUI Denial of Service Vulnerability Discovered in FortiOShttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-fabric-api-authentication-bypass/Threat Timesen2026-10-13T17:48:30ZFortiGuard alerts on Fabric API auth bypass in FortiSandbox with CVSS 4.9 scorehttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-double-free-in-signal-handler/Threat Timesen2026-10-13T17:48:30ZFortinet revises advisory for low-severity double free flaw in FortiOS, FortiProxy and FortiSwitchhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-broken-authorization/Threat Timesen2026-10-13T17:48:30ZFortiSIEM GUI Authorization Flaw Allows Unauthorized Code Executionhttps://threattimes.com/category/vulnerabilities/fortiguard-psirt-arbitrary-file-write-in-grpc/Threat Timesen2026-10-13T17:48:30ZFortiSIEM path traversal flaw allows unauthenticated code executionhttps://threattimes.com/category/vulnerabilities/fortinet-fortisiem-path-traversal-flaw-cve-2026/Threat Timesen2026-10-13T17:47:18ZFortinet FortiSIEM 7.5.0 Has Critical Path Traversal Flawhttps://threattimes.com/category/tech/tfg-london-cyberattack-disrupts-it-systems-for/Threat Timesen2026-10-13T17:45:30ZTFG London Cyberattack Disrupts IT Systems for Hobbs, Whistles, and Phase Eighthttps://threattimes.com/category/data-breaches/meta-hackers-stole-code-and-data-of-1-500-via/Threat Timesen2026-10-13T17:32:44ZMeta Hackers Stole Code and Data of 1,500 via GitHub Reposhttps://threattimes.com/category/tech/g2a-com-data-shows-antivirus-sales-surge-35-year/Threat Timesen2026-10-13T17:28:08ZG2A.COM Data Shows Antivirus Sales Surge 35% Year-Over-Yearhttps://threattimes.com/category/tech/google-play-adds-private-distribution-for-ai/Threat Timesen2026-10-13T17:28:08ZGoogle Play adds private distribution for AI-generated personal Android appshttps://threattimes.com/category/vulnerabilities/risesoft-y9-digital-infrastructure-path-traversal/Threat Timesen2026-10-13T17:24:17ZRisesoft-y9 Digital-Infrastructure Has High-Severity Unauthenticated Path Traversal Flawhttps://threattimes.com/category/vulnerabilities/docker-hub-critical-flaw-allowed-token-based-user/Threat Timesen2026-10-13T17:11:14ZDocker Hub Critical Flaw Allowed Token-Based User Impersonationhttps://threattimes.com/category/vulnerabilities/critical-severity-flaw-in-podman-container-tools/Threat Timesen2026-10-13T17:02:20ZCritical Podman Flaw Bypasses Security Restrictions via Image Annotationshttps://threattimes.com/category/ai/google-gemini-4-argon-launches-in-app-for-pro-and/Threat Timesen2026-10-13T16:54:48ZGoogle Gemini 4 Argon Launches in App for Pro and Ultra Subscribershttps://threattimes.com/category/ai/google-opens-gemini-4-argon-api-access-for/Threat Timesen2026-10-13T16:40:52ZGoogle Opens Gemini 4 Argon API Access for Developers and Enterprise Usershttps://threattimes.com/category/vulnerabilities/cve-2026-55562-cross-site-scripting-flaw-in/Threat Timesen2026-10-13T16:38:02ZCritical Stored XSS in Cronicle Task Scheduler Allows Admin Account Takeoverhttps://threattimes.com/category/vulnerabilities/cve-2026-54454-unrestricted-file-upload-flaw-in/Threat Timesen2026-10-13T16:38:02ZOpenCATS Patch Fixes Critical RCE Flaw in Import Modulehttps://threattimes.com/category/vulnerabilities/zarestia-dev-rclone-manager-missing/Threat Timesen2026-10-13T16:38:02ZRClone Manager Fixes Critical Local API Flaw in Version 0.2.7https://threattimes.com/category/vulnerabilities/ivanti-neurons-patch-for-intune-flaw-cve-2026/Threat Timesen2026-10-13T16:38:02ZCritical Flaw in Ivanti Neurons Patch for Intune Exposes Authentication Datahttps://threattimes.com/category/vulnerabilities/critical-severity-incorrect-authorization-flaw-in/Threat Timesen2026-10-13T16:38:02ZArgo CD Patched Critical Auth Bypass in PostDelete Hookshttps://threattimes.com/category/ai/google-launches-gemini-4-argon-model-for/Threat Timesen2026-10-13T16:27:30ZGoogle Launches Gemini 4 Argon Model for Developers and Enterpriseshttps://threattimes.com/category/ai/google-rolls-out-gemini-4-argon-to-paying-ai-pro/Threat Timesen2026-10-13T16:27:30ZGoogle Rolls Out Gemini 4 Argon to Paying AI Pro and Ultra Usershttps://threattimes.com/category/vulnerabilities/tanstack-router-cross-site-scripting-flaw-cve/Threat Timesen2026-10-13T16:20:04ZTanStack Router Critical Cross-Site Scripting Flaw Fixed in Latest Versionshttps://threattimes.com/category/vulnerabilities/esri-portal-for-arcgis-missing-authentication/Threat Timesen2026-10-13T16:20:04ZCritical Auth Bypass Flaw Found in Esri Portal for ArcGIShttps://threattimes.com/category/vulnerabilities/ivanti-xtraction-flaw-cve-2026-106042-rated-cvss/Threat Timesen2026-10-13T16:20:04ZIvanti Xtraction Critical Flaw Allows Credential Theft Before 2026.4