Vulnerabilities and CVEs

06:00 Patch

Google quadruples Chrome bug bounty base pay, offers up to $20,000 for sandbox escapes

Help Net Security

06:00 Patch

Natural Code Transformation Confuses Agents in Vulnerability Analysis

arXiv cs.CR

06:00 Vulnerability

SecReason: Vulnerability Detection and In-Stream Self-Repair for LLM Code Generation

arXiv cs.CR

06:00 Vulnerability

No, Your Tools Are Not Enough: It's Time to Bring Agents to the Hunt

arXiv cs.CR

06:00 Vulnerability

Last Secure Code Benchmark: Is the Code You Vibe Secure?

arXiv cs.CR

05:31 Vulnerability

USN-8925-1: YAML-LibYAML vulnerabilities

Ubuntu Security

02:00 Vulnerability

SVD-2026-1006: Advance Notice of Publication of Splunk Security Advisories - October 2026

Splunk

01:24 Exploited

Microsoft Patches More Than 1,400 Security Flaws

Krebs on Security

00:29 Exploited

Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday

Dark Reading

00:10 Exploited

Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day

CyberScoop

00:00 Patch

Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)

CVE-2026-103572Embrace The Red

00:00 Patch

DSA-6558-1 curl - security update

Debian Security

00:00 Patch

DSA-6561-1 sogo - security update

Debian Security

00:00 Patch

DSA-6560-1 firefox-esr - security update

Debian Security

00:00 Patch

DSA-6559-1 buildstream - security update

Debian Security

00:00 Patch

Chrome for Android Update

Chrome Releases

23:49 Exploited

Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

CVE-2026-96951Tenable

23:40 Patch

Patch Tuesday - October 2026

Rapid7

23:33 Vulnerability

Ghostscript flaw lets hackers hijack servers via PDF uploads

CVE-2026-39919BleepingComputer

23:16 Patch

Beta Channel Update for ChromeOS / ChromeOS Flex

Chrome Releases