Tag: update
-
Hidden implant in Ledger hardware wallets linked to $93M theft
Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/12/ledger-wallets-compromised-via-hardware-implant/
-
Update behebt Schwachstellen – Rclone schließt Lücken in S3 und WebDAV
First seen on security-insider.de Jump to article: www.security-insider.de/rclone-schliesst-luecken-in-s3-und-webdav-a-4a1c00d645a61a8bef9db8708ab28b7f/
-
Windows PCs missing key updates could lose security fixes in 2027
Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/12/microsoft-windows-update-certificate-rotation/
-
Windows PCs missing key updates could lose security fixes in 2027
Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/12/microsoft-windows-update-certificate-rotation/
-
Windows PCs missing key updates could lose security fixes in 2027
Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/12/microsoft-windows-update-certificate-rotation/
-
AI vulnerability patching has a grading problem
Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/12/ai-vulnerability-patching-grading-problem/
-
What makes some open source updates so difficult?
Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still requires engineering … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/12/google-open-source-maintenance-costs-report/
-
Week in review: FortiBleed is still active, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO should ask a healthcare fintech vendor In … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/11/week-in-review-fortibleed-is-still-active-patch-tuesday-forecast/
-
Microsoft tweaks Windows to secure agentic AI
The half-yearly update to the Windows operating system gets a host of features for running AI models locally and securely First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366652039/Microsoft-tweaks-Windows-to-secure-agentic-AI
-
CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability
Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-107406 (CVSS score of 9.5), a critical flaw affecting NetScaler ADC and NetScaler Gateway that could allow remote code execution or denial-of-service (DoS) under certain conditions. The vulnerability is…
-
Outdated Windows devices will stop receiving security updates
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year’s Windows Update certificate rotation. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-outdated-windows-devices-will-lose-security-protection-next-year/
-
Outdated Windows devices will stop receiving security updates
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year’s Windows Update certificate rotation. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-outdated-windows-devices-will-lose-security-protection-next-year/
-
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately/
-
October 2026 Patch Tuesday forecast: Time for an Office cleanup
September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/09/october-2026-patch-tuesday-forecast/
-
Anthropic Bans AI Model Abuse, Tightens Rules on Deception
Updated Claude Policy Targets Influence Campaigns, Surveillance and Mistreatment of AI Models. Anthropic is telling users to be nicer to AI models in an updated usage policy that also clarifies deceptive activities. The policy update is meant to apply only in extreme cases, where users repeatedly act cruelly toward our models, with no discernible purpose,…
-
Making sure the checks get printed
Pierre’s debut newsletter explores the messy, real-world side of risk management and how to keep vital systems running when a perfect patch isn’t an option. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/making-sure-the-checks-get-printed/
-
Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
IBM and Red Hat have found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries through Lightwell, their program for patching open source … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/08/lightwell-java-library-vulnerabilities/
-
Google October Update Fixes Pixel Bugs as Pixel 6 Nears End of Support
Google’s October 2026 update patches critical Pixel flaws, fixes VoIP and keyboard bugs, and may mark the end of regular support for Pixel 6. The post Google October Update Fixes Pixel Bugs as Pixel 6 Nears End of Support appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-pixel-october-2026-security-update/
-
Samsung’s October Update Patches 9 Critical Security Flaws Across Galaxy Devices
Samsung’s October 2026 security update patches nine critical Android flaws and multiple Galaxy vulnerabilities. Here’s what users should update. The post Samsung’s October Update Patches 9 Critical Security Flaws Across Galaxy Devices appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-samsung-october-2026-security-update/
-
Singapore Plans Major Changes to Port Rules After 30 Years
Singapore is preparing the most significant update to its port legislation in nearly three decades. A new MPA Amendment Bill would give the Maritime and Port Authority of Singapore dedicated powers over maritime cybersecurity, along with fresh authority to regulate drones, autonomous vessels and artificial intelligence. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/singapore-mpa-amendment-bill/
-
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices and is locking out admins. The FBI and the U.S. Secret Service issued a joint advisory about FortiBleed, and the headline number alone is worth sitting with: more than 86,644 compromised Fortinet FortiGate devices across 194 countries, according to…
-
weitere Sicherheitslücke – BSI meldet aktive Angriffe auf NetScaler-Schwachstelle
First seen on security-insider.de Jump to article: www.security-insider.de/bsi-warnung-netscaler-authentifizierungs-bypass-adc-gateway-a-3b12a541f2a130a759f90ef5c6afa980/
-
OpenSSH 10.6 Fixes Security Flaws Including SSH Plaintext Recovery Attack
OpenSSH released version 10.6 on October 6, 2026, to address security vulnerabilities that affect encrypted sessions, file transfers, authentication, and forwarding controls. This update mitigates a plaintext recovery attack that exploits shared compression states across multiplexed SSH channels and introduces compatibility changes, while accelerating the project’s security release schedule. OpenSSH 10.6 Fixes Security Flaws The…
-
Critical Veeam Backup Replication Flaw Allows Low-Privileged Users to Execute Remote Code
Veeam released security updates to address a critical vulnerability that lets low-privileged users execute remote code on Veeam Backup Servers. Identified as CVE-2025-64393, this flaw has a CVSS v4.0 score of 9.4 and was resolved in Veeam Backup & Replication version 12.3.2 P4, build 12.3.2.4934, released on October 6, 2026. The vulnerability affects build 12.3.2.4854…
-
Wiretapping change sparks big privacy fight in the Golden State
An update to a state wiretapping law will end private lawsuits over some internet tracking and surveillance, pitting businesses against privacy groups and unions.’ First seen on cyberscoop.com Jump to article: cyberscoop.com/california-cipa-pen-register-privacy-lawsuit-bill/
-
‘BigDiskBuster’ Leaves Microsoft Defender Running While Blocking Updates
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/bigdiskbuster-microsoft-defender-running-blocking-updates
-
‘BigDiskBuster’ Leaves Microsoft Defender Running While Blocking Updates
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/bigdiskbuster-microsoft-defender-running-blocking-updates
-
Radeon RX 7000 – Auch Gigabyte schließt Sicherheitslücken per vBIOS-Update
Tags: updateNeben Sapphire verteilt auch Gigabyte ein neues vBIOS für Grafikkarten der Serie Radeon RX 7000 aufgrund eines Sicherheitsproblems. First seen on computerbase.de Jump to article: www.computerbase.de/news/grafikkarten/radeon-rx-7000-auch-gigabyte-schliesst-sicherheitsluecken-per-vbios-update.99683
-
CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely
Microsoft released emergency updates for Exchange Server to fix CVE-2026-96940, a high-severity flaw that can let attackers gain higher privileges. Microsoft has released out-of-band security updates for Exchange Server to fix a high-severity vulnerability tracked as CVE-2026-96940 (CVSS score of 8.8). The flaw is caused by weak authorization and can allow an authenticated attacker to…