Google has launched Chrome version 151.0.7922.108/.109 for Windows and macOS, and version 151.0.7922.108 for Linux. This update brings 41 security fixes for different parts of the browser, such as rendering, graphics, JavaScript, user interface (UI), media, and authentication. Google Chrome 151 Update The update fixes six serious memory issues. Five …
Read More »Urgent patch! Cisco and IMB patch multiple flaws
Cisco has put out an important update for Cisco IOS XE Software. This update fixes serious security holes that could let remote attacks target enterprise network devices. The flaws can impact Cisco IOS XE Software in both autonomous mode and controller mode, no matter how the device is set up. …
Read More »
CVE-2026-18574
Check Point Authentication Bypass Hits Management Server
Check Point fixed a flaw that allowed bypassing authentication on its Security Management and Multi-Domain Security Management servers. This issue is tracked as CVE-2026-18574 and has a CVSS score of 9.3. Check Point discovered the problem themselves and says there are no current attacks. Why it matters An attacker without …
Read More »TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
TP-Link has shared a security warning about a serious problem with its TL-WR940N V6 wireless router. This problem, known as CVE-2026-12935, might let attackers who haven’t logged in cause a denial-of-service issue or run their code on affected devices in some situations. According to TP-Link, the vulnerability is caused by …
Read More »CISA alerts to cyberattacks affecting U.S. water utilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of a big rise in attacks on internet-connected programmable logic controllers (PLCs) used in water and wastewater systems. The agency’s alert is urgent because hackers affected over 30 local water systems in Minnesota. The attacks began last Sunday and went on until …
Read More »NVIDIA BlueField Flaw Enables Code Execution Attacks
NVIDIA has revealed a big flaw with its BlueField DPUs and ConnectX networking systems. This issue could let attackers run code on these systems if they take advantage of it. This security flaw, known as CVE-2026-65094, affects the VIRTIO-Net part and has a CVSS v3.1 score of 9.0, showing it is …
Read More »Shinyhunters claimed and set deadline to publish E&Y data
ShinyHunters has publicly claimed responsibility for the Ernst & Young (EY) data breach. The group posted a message on their dark web site. It says they will release all stolen data by July 31, 2026, unless EY talks to them before the mentioned date. EY shared details about the incident …
Read More »Apple, ASUS Router, Meta, Windmill & Ubuntu Patch Critical Security Flaws
ASUS has put out important security updates for a serious router flaw. This issue could let remote hackers run any commands on the affected devices. The flaw, known as CVE-2026-13385, affects many ASUS router firmware versions, such as the commonly used 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102 series. The ASUS Product Security Advisory …
Read More »Oracle fixes 1,400+ vulnerabilities; critical flaws threaten enterprise servers
Oracle has fixed over 1,400 security holes in its July 2026 Critical Patch Update (CPU). Most of these flaws were probably found by artificial intelligence. According to Oracle, the latest quarterly CPU includes 1,449 security patches, addressing 1,434 unique CVEs across 334 products. Vulnerabilities have been fixed in products like Database …
Read More »Zimbra Patches 4 XSS and Critical SNMP Command Injection Flaws
Zimbra has launched updates to fix serious security flaws, including a command injection bug in the SNMP monitoring part. As many as nine security flaws have been fixed in Zimbra 10.1.20. The biggest issue is a command injection problem in the SNMP monitoring part when SNMP alerts are turned on. …
Read More »
InfoSecBulletin Cybersecurity for mankind