Latest news
-
Vulnerabilities via SOCRadar
CVE-2026-102764: BeyondTrust Zero-Day Exploited
BeyondTrust has disclosed CVE-2026-102764, a critical Remote Support vulnerability exploited as a zero-day weeks before customers received a patch. The attack began on…
-
Vulnerabilities via Canadian Centre for Cyber Security
Mozilla security advisory (AV26-1057)
Serial number: AV26-1057 Date: October 16, 2026 As of October 13, 2026, Mozilla is affected by vulnerabilities in the following products: Firefox ESR Prior to 153.5…
-
Threat Intel via SecurityWeek
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under…
-
Breaches via Security Affairs
Burger King Japan Data Breach Impacted 11 Million Customers
Burger King Japan disclosed a breach exposing 11.18 million app users’ personal data after attackers accessed its membership system in early October. Burger King Japan…
-
AI Security via The Hacker News
OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract
OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model…
-
Ransomware via Dark Reading
When Your Ransomware Negotiator Works for the Other Side
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-83831 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- Advertisement
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-85890 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-85897 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-85898 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-96198 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-96199 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
Vulnerabilities via Microsoft Security Response Center
Chromium CVE-2026-106287: Information loss
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…
-
Vulnerabilities via Microsoft Security Response Center
Chromium CVE-2026-106288: Missing authorization
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…
-
Vulnerabilities via Microsoft Security Response Center
Chromium CVE-2026-106289: Missing authorization
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…
-
Vulnerabilities via Microsoft Security Response Center
Chromium CVE-2026-106291: Use after free
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…
-
Vulnerabilities via Microsoft Security Response Center
Chromium CVE-2026-106292: Buffer overflow
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…
-
Vulnerabilities via Microsoft Security Response Center
Chromium CVE-2026-106412: Race condition
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…
-
Vulnerabilities via Microsoft Security Response Center
Chromium CVE-2026-106293: Type confusion
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…
