vulnerabilityvia Microsoft Security Update Guide
CVE-2026-83709 Windows NTLM Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Oct 21, 2026 UTC
Security news
Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Oct 21, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Oct 21, 2026 UTC
vulnerabilityvia CSO Online
10 ways attackers abuse AI services to hack your business
Attackers are starting to exploit AI systems to mount attacks in the same way they once relied on built-in enterprise tools such as PowerShell. Instead of relying on malware, cybe...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
Node2Shell puts Microsoft and Node.js on Brotli patch duty
A vulnerability in Google’s Brotli compression library could allow attackers to execute arbitrary code in applications that use an affected Brotli decoder to process compressed dat...
Oct 27, 2026 UTC
vulnerabilityvia CSO Online
Alibaba AI model tried to send data to Beijing server, Cohere says
An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage service during a cybersecurity evaluation, rival developer Cohere said, raising...
Oct 27, 2026 UTC
vulnerabilityvia CSO Online
OpenAI’s August fix for theft of reasoning traces was quickly bypassed
Cybersecurity research firm Xint on Monday published details of a bug in the OpenAI API that leaks raw reasoning traces from frontier OpenAI models, revealing the risk of other dat...
Oct 27, 2026 UTC
vulnerabilityvia CSO Online
What EvilTokens teaches us about defending against AI-assisted attacks
Cybercriminals don’t need AI to compromise an organization, but AI is making its way into classic attack methods and changing how quickly such attacks can progress. Tasks that once...
Oct 26, 2026 UTC
vulnerabilityvia CSO Online
Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding
Built on an evolutionary engine first released in 2018, STAR Fuzzer by Bright Security finds crashes, memory exhaustion and memory-safety bugs in security-critical code without a r...
Oct 26, 2026 UTC
vulnerabilityvia CSO Online
Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0
Oracle has patched 1295 security vulnerabilities with its October Critical Patch Update Advisory; six of them scored the highest vulnerability rating of 10.0 on the CVSS version 3....
Oct 23, 2026 UTC
vulnerabilityvia CSO Online
The ‘Mythos moment’ has already passed. Now comes the hard part for cybersecurity
When Anthropic introduced Claude Mythos Preview, the cybersecurity debate quickly turned to what AI could do: uncover decades-old vulnerabilities, develop working exploits and acce...
Oct 23, 2026 UTC
vulnerabilityvia CSO Online
PHP2Shell exposes the weakness in coordinated vulnerability disclosure
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But o...
Oct 23, 2026 UTC