InfoSecBulletin Cybersecurity for mankind
Apple released critical updates for its various products including for iOS, iPadOS, macOS, visionOS, and Safari to fix two zero-day vulnerabilities actively being exploited in the wild.
The flaws are listed below:
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE
By infosecbulletin
/ Tuesday , October 27 2026
Apple launched iOS 27.2 and iPadOS 27.2 on October 26, 2026, fixing 163 security flaws. The update is for iPhone...
Read More
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
By infosecbulletin
/ Tuesday , October 27 2026
CISA has updated a new alert to reflect the addition of CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV)...
Read More
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
By infosecbulletin
/ Monday , October 26 2026
Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release...
Read More
Daily Cyber security update for 26.10. 2026
By infosecbulletin
/ Monday , October 26 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
By infosecbulletin
/ Monday , October 26 2026
AI startup Cathedral gained a limited access to internal systems at Anthropic in less than 12 hours, exposing employee information,...
Read More
Daily Cyber security update for 25. 10. 2026
By infosecbulletin
/ Sunday , October 25 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 24. 10. 2026
By infosecbulletin
/ Saturday , October 24 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
By infosecbulletin
/ Friday , October 23 2026
The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...
Read More
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
By infosecbulletin
/ Friday , October 23 2026
Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
By infosecbulletin
/ Thursday , October 22 2026
Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
CVE-2024-44309 : A vulnerability in cookie handling that could allow a cross-site scripting (XSS) attack when processing harmful web content
CVE-2024-44308:Â JavaScriptCore vulnerability to allow harmful code while handling malicious web content
While the details of the exploitation are not clear, Apple said they are actively exploiting on Intel-based Mac systems.
The below mentioned devices and operating systems got updates:
Users should update their devices to the latest version promptly to protect against potential threats.
