Chronological technology intelligence ledger across all editorial desks
Oct 13, 2026The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks. North Korean state-sponsord hackers are spear-phishing government, policy, and academic circ...
Oct 13, 2026The scary surprises for the largest security update ever include security bypasses and unauthenticated RCEs. As we progress further into the AI-driven "vulnpocalypse era," Microsoft's October 2026 Patch Tuesday security update blows past last month'...
Oct 13, 2026Meta is notifying roughly 1,500 people, most of them employees in the US, that their personal information was impacted after hackers got into some of the company's GitHub repositories. The intrusion was detected a few weeks ago. According to the tec...
Oct 13, 2026Google announced Tuesday that it's raising bug bounty rewards for some Chrome vulnerabilities, focusing on memory safety issues. AI has been changing the pace and profile of vulnerability discovery, and the tech giant has been adjusting its bug boun...
Oct 13, 2026Adobe has published 10 new security advisories to inform customers about roughly 140 vulnerabilities found and patched in its products. Adobe ColdFusion updates address 32 vulnerabilities, including critical bugs that can be exploited for code execu...
Oct 13, 2026Ivanti on Tuesday warned customers that a zero-day vulnerability in its Connect Secure (ICS) VPN appliances has been exploited in the wild. Tracked as CVE-2026-104935 and rated high severity, the issue is an authentication bypass that lets a remote,...
Oct 13, 2026A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. The flaw was discovered on August 23 by researchers at Defiant'...
Oct 13, 2026Months before hackers targeted refrigeration equipment across hundreds of grocery stores in France, a U.S.-based cybersecurity firm discovered high-severity flaws in internet-exposed equipment that could make such an attack possible. Hackers reporte...
Oct 13, 2026A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw...
Oct 13, 2026GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal th...
Oct 13, 2026A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (...
Oct 13, 2026An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected v...