Vulnerabilities and CVEs

00:00 Patch

The skb that wasn't freed - the Fragnesia primitive via Open vSwitch

Doyensec

22:33 Vulnerability

CISA decides weekly vulnerability bulletin isn't necessary anymore

The Register

21:43 Vulnerability

ISC BIND security advisory (AV26-931)

Canadian Centre for Cyber Security

21:42 Vulnerability

Apple security advisory (AV26-930)

Canadian Centre for Cyber Security

21:29 Vulnerability

Oracle Corporation security advisory (AV26-929)

Canadian Centre for Cyber Security

20:35 Vulnerability

HPE security advisory (AV26-928)

Canadian Centre for Cyber Security

20:28 Patch

Chrome Beta for Android Update

Chrome Releases

20:00 Vulnerability

[Control Systems] Phoenix Contact security advisory (AV26-927)

Canadian Centre for Cyber Security

19:56 Exploited

Google Pixel phones pwned in zero-click attacks

The Register

19:28 Patch

Chrome for Android Update

Chrome Releases

19:13 Patch

Google security advisory (AV26-926)

Canadian Centre for Cyber Security

19:10 Vulnerability

VU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control

CERT/CC

19:10 Exploited

Android security advisory – September 2026 monthly rollup (AV26-920) – Update 1

CVE-2026-58704Canadian Centre for Cyber Security

18:58 Patch

Chrome Beta for Desktop Update

Chrome Releases

18:47 Vulnerability

BTS #82 - Firmware Analysis, Linux Malware, Future of AI

Eclypsium

18:28 Patch

Chrome Beta for iOS Update

Chrome Releases

17:18 Vulnerability

VU#212479: Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment

CVE-2026-90999CERT/CC

16:47 Exploited

Google says some Pixel phone owners were hacked in zero-day attacks

TechCrunch

16:15 Patch

Oracle Critical Security Patch Update, September 2026 Review

Qualys

16:07 Patch

Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

Cisco PSIRT