Critical Vulnerabilities
SUSE cups-filters Important Privilege Escalation Update CVE-2026-95511
An update that solves one vulnerability can now be installed.
Technology & Cybersecurity Intelligence
Tech News Hub
Curated security alerts, vulnerabilities, operating-system updates, cloud and AI news, and vendor advisories from trusted sources.
Last updated
17 Oct 2026, 8:13 PM
Next refresh
18 Oct 2026, 8:00 AM
Automatically refreshed twice daily
Critical Vulnerabilities
SUSE python-urllib3 Important Denial of Service Vuln 2026-4649-1
An update that solves two vulnerabilities can now be installed.
Critical Vulnerabilities
openSUSE Python-urllib3 Important DoS Issues Advisory 2026-4650-1
An update that solves two vulnerabilities can now be installed.
Critical Vulnerabilities
SUSE python-urllib3 Important Denial of Service Advisory 2026-4650-1
An update that solves two vulnerabilities can now be installed.
Critical Vulnerabilities
SUSE php8 Important Denial of Service Issue Advisory 2026-4651-1
An update that solves 10 vulnerabilities can now be installed.
Critical Vulnerabilities
openSUSE php8 Important Multiple Issues Vuln 2026-4651-1
An update that solves 10 vulnerabilities can now be installed.
Critical Vulnerabilities
SUSE Python-Virtualenv Key Injection Security Flaw Report 2026-4652-1
An update that solves two vulnerabilities can now be installed.
Critical Vulnerabilities
High
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances…
Critical Vulnerabilities
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported…
Critical Vulnerabilities
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS…
Critical Vulnerabilities
How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams…
Critical Vulnerabilities
Hirudo Android malware replaces banking apps to evade security checks
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks. [...]
Cloud & AI
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when…
Critical Vulnerabilities
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions…
Cloud & AI
Critical
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part.…
Critical Vulnerabilities
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator…
Critical Vulnerabilities
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade…
Critical Vulnerabilities
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of…