Tag: update
-
Google warnt: Gefährliche Modem-Lücke in Pixel-Smartphones unter Beschuss
Die neuen Updates für Google-Pixel-Geräte schließen Hunderte von Sicherheitslücken. Eine ist besonders gefährlich und wird bereits ausgenutzt. First seen on golem.de Jump to article: www.golem.de/news/google-warnt-gefaehrliche-modem-luecke-in-pixel-smartphones-unter-beschuss-2609-213089.html
-
36,769 Self-Hosted AI Services Exposed Online, What Security Teams Should Check
A new scan found 36,769 self-hosted AI endpoints reachable online, highlighting gaps in access controls, patching, and monitoring. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-self-hosted-ai-security/
-
Acronis Backup Plugin Vulnerability Exploited in the Wild to Gain Elevated Linux Privileges
Acronis has released an urgent security update for a high-severity local privilege escalation vulnerability affecting its Backup plugin for cPanel & WHM on Linux. The company confirmed that attackers have already exploited this flaw in limited, targeted attacks against vulnerable deployments. This vulnerability is tracked as CVE-2026-87886 and is described as an insecure file permissions…
-
Apple Patches 273 Vulnerabilities as iOS 26.7 Rolls Out
A new Apple security update has been dropped for iPhone owners, releasing iOS 26.7 alongside its major annual release, iOS 27. The move gives iPhone users who are hesitant to jump straight into a full system overhaul a safer, lighter-weight path to staying protected, arriving less than a month after the previous patch, iOS 26.6.1.…
-
Apple Releases iOS 27 Security Update to Fix Over 120 Vulnerabilities
Apple has released iOS 27 and iPadOS 27, delivering one of its largest mobile security update batches to date. The release addresses approximately 126 vulnerabilities within the operating system, including flaws affecting the kernel, sandboxing mechanisms, WebKit, authentication services, and other security-sensitive components. Released on September 14, 2026, iOS 27 is available for the iPhone…
-
Google Chrome 153 Released With Fixes for 42 Security Vulnerabilities
Google has released Chrome version 153 to the Stable channel for desktop, addressing 42 security vulnerabilities, including three critical-severity flaws affecting WebGL, Chrome internals, and Workers. This update is being rolled out as version 153.0.8010.47/48 for Windows and macOS, and as version 153.0.8010.47 for Linux. The release includes a wide range of memory-safety, authorization, race-condition,…
-
CVE Authorities Make Score 8 Look More Like the New 10
Exploit Maturity Can Lower Scores Until Attack Evidence or PoCs Emerge. CVSS 4.0 lets threat intelligence alter a vulnerability’s enriched score without changing its Base severity, prompting experts to warn that vendors and defenders must continuously reassess exploitation, exposure and patch priority. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cve-authorities-make-score-8-look-more-like-new-10-a-32829
-
Cisco users urged to patch email gateway flaw
Cisco warns defenders to patch a critical vulnerability in its Secure Email Gateway appliance that may be used by attackers to gain root privileges. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366649998/Cisco-users-urged-to-patch-email-gateway-flaw
-
Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites
Malicious versions of the Admin Menu Editor Pro plugin for WordPress have been distributed to more than 200 customers after a threat actor compromised the maintainer’s website and pushed updates that created a hidden user account. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malcious-admin-menu-editor-pro-plugin-backdoors-1-500-wordpress-sites/
-
Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites
Malicious versions of the Admin Menu Editor Pro plugin for WordPress have been distributed to more than 200 customers after a threat actor compromised the maintainer’s website and pushed updates that created a hidden user account. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malcious-admin-menu-editor-pro-plugin-backdoors-1-500-wordpress-sites/
-
Microsoft Issues Emergency Fixes After Massive Patch Tuesday
You can’t make an omelet without breaking a few eggs, and you can’t patch nearly 1,000 CVEs without a few glitches. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/microsoft-emergency-fixes-patch-tuesday
-
Daily OT Security News: September 15, 2026
The threat landscape for operational technology (OT) and industrial control systems (ICS) remains critical as organizations face increasing vulnerabilities and targeted attacks. Recent reports highlight significant breaches, regulatory updates, and emerging threats that require immediate attention from security teams. Key… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-15-2026/
-
1Password’s AI patching benchmark is misleading
1Password’s FLAWED report, published on August 6, 2026, gives defenders a misleading picture of AI patching. Its headline says models produced clean fixes only 26% of the time. That figure includes experiments that deliberately instructed agents to apply the wrong… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/1passwords-ai-patching-benchmark-is-misleading/
-
Shared Hosting at Risk: LiteSpeed Enterprise Bug Can Grant Root from a Single Tenant
Critical LiteSpeed Enterprise flaw lets one shared hosting account gain root, bypassing CageFS; patch now to 6.3.7 via forced update. cPanel warned that a critical flaw in LiteSpeed Enterprise can let a low”‘privilege website user break out of their account and gain root on the whole server. On a box where dozens or hundreds of…
-
Facing Steep Criticism Over Abuse, Flock Updates Platform But Draws Skepticism From Privacy Advocates
Flock Safety’s new ALPR safeguards, including shorter data retention and AI-assisted auditing, face continued skepticism from privacy advocates and lawmakers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/facing-steep-criticism-over-abuse-flock-updates-platform-but-draws-skepticism-from-privacy-advocates/
-
One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire
Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, before Chrome’s patch shipped, deploying different backdoors each. Two China-linked threat actors used the same Chrome/Windows zero-day against NGOs starting September 1, 2026, Volexity’s new report lays out the whole chain in detail. On September 1, Volexity detected a spear-phishing campaign by UTA0560 targeting several…
-
Confidential Computing gebrochen: DDRop-Angriff ermöglicht Datenklau in der Cloud
Ein kleines Gerät für nur 159 US-Dollar lässt Angreifer verschlüsselte Daten aus fremden Cloud-Instanzen abgreifen. Einen Patch gibt es nicht. First seen on golem.de Jump to article: www.golem.de/news/confidential-computing-gebrochen-ddrop-angriff-ermoeglicht-datenklau-in-der-cloud-2609-213031.html
-
Microsoft Releases Emergency Patch to Fix RDS Vulnerability
Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/
-
Mehrere Bugs beseitigt: Microsoft verteilt Notfallupdates für Windows
Die neuen Windows-Updates beheben mehrere seit dem September-Patchday bestehende Bugs. Zudem adressiert Microsoft eine vergessene Schwachstelle. First seen on golem.de Jump to article: www.golem.de/news/mehrere-bugs-beseitigt-microsoft-verteilt-notfallupdates-fuer-windows-2609-213014.html
-
Mehrere Bugs beseitigt: Microsoft verteilt Notfallupdates für Windows
Die neuen Windows-Updates beheben mehrere seit dem September-Patchday bestehende Bugs. Zudem adressiert Microsoft eine vergessene Schwachstelle. First seen on golem.de Jump to article: www.golem.de/news/mehrere-bugs-beseitigt-microsoft-verteilt-notfallupdates-fuer-windows-2609-213014.html
-
Nintendo Switch Flaw Lets Nearby Attackers Run Code, Steal Data
A newly disclosed Nintendo Switch vulnerability is pushing owners of the original console toward an urgent firmware update, particularly those who tend to play in public spaces. Nintendo confirmed the vulnerability in Nintendo Switch systems in a PDF advisory released Sept. 10, just a day after quietly shipping firmware version 23.0.0 to address the problem.…
-
Microsoft confirms KB5002914 Excel update breaks copy and paste
Microsoft has confirmed that copy and paste may silently fail for some Excel users after installing the September 2026 KB5002914 security update. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-september-kb5002914-security-update-breaks-excel-copy-and-paste/
-
Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-cisco-secure-email-zero-day-exploited-to-execute-commands-as-root/
-
Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-cisco-secure-email-zero-day-exploited-to-execute-commands-as-root/
-
Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-cisco-secure-email-zero-day-exploited-to-execute-commands-as-root/
-
Microsoft Releases Emergency Patch to Fix RDS Snafu
Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-releases-emergency-patch/
-
Mehrere Bugs beseitigt: Microsoft verteilt Notfallupdates für Windows
Die neuen Windows-Updates beheben mehrere seit dem September-Patchday bestehende Bugs. Zudem adressiert Microsoft eine vergessene Schwachstelle. First seen on golem.de Jump to article: www.golem.de/news/mehrere-bugs-beseitigt-microsoft-verteilt-notfallupdates-fuer-windows-2609-213014.html
-
ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up
Frontier AI is compressing the attack lifecycle from vulnerability discovery to exploitation, forcing defenders to detect, patch and respond at machine speed. Cybersecurity has always been a race between attackers and defenders. ENISA’s latest assessment suggests that frontier AI is changing the speed of that race, and the gap between discovering a vulnerability and exploiting…
-
Microsoft releases emergency Windows updates to fix RDS failures
Microsoft has released emergency out-of-band Windows updates to fix Remote Desktop Services failures caused by this month’s security updates, along with Hyper-V and USB audio problems on some Windows versions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-windows-updates-to-fix-rds-failures/
-
InWild Attacks Hit Popular DevSecOps Platform GitLab
Recently Patched Flaw Is Being Actively Exploited to Steal Files and Credentials. Attackers are actively targeting a recently patched vulnerability in the popular DevSecOps platform GitLab that they can exploit to steal data and credentials from public-facing, self-hosted GitLab servers. The software developer is urging all self-hosted users to update immediately. First seen on govinfosecurity.com…