Vulnerabilities

Microsoft breaks its record to its patch history. The company patched record 1411 flaws and 3 zero day of its October 2026 Patch Tuesday. This Patch Tuesday addresses 70 “Critical” vulnerabilities, 57 of which are remote code execution, 11 are elevation of privileges, and 2 are spoofing. The approximate number …

CISA has added a serious Cisco Secure Email Gateway flaw to its list of known exploits. They warn that attackers are using this flaw in real attacks. The flaw, known as CVE-2026-76461, impacts Cisco AsyncOS software on Cisco Secure Email Gateway devices. CVE-2026-76461 is a type of SQL injection flaw, listed …

Check Point Software has revealed and fixed two major VPN flaws, CVE-2026-85102 and CVE-2026-85103. Both have a top CVSS score of 9.8 and can let unverified users run code from far away in certain situations. Check Point’s research team found the flaws, and the company says there is no proof of …

Over 14,000 Dahua security cameras connected to the internet have been hacked in a 35-day online attack that affected devices around the world. This shows the rising danger of unsafe and unprotected surveillance systems. Researchers at Hunt.io found the operation by looking into a public directory with 2,616 files related …

Google has updated the Chrome browser to fix a serious security issue in the V8 engine and 11 other flaws. The security flaw, called CVE-2026-85046, is a type confusion. Researcher Salvatore Gulizia, known as “Serotav,” told Google about it. The update makes Chrome version 152.0.7977.82/.83 for Windows and macOS, and …

CERT Polska has alerted that bad actors are actively exploiting a security flaw in Zimbra Collaboration Suite to execute code remotely. The bug known as CVE-2026-73570 lets attackers who are not logged in run any commands on affected servers as the zimbra user. There is a flaw with Zimbra’s SNMP …

A big security flaw in the Forminator Forms WordPress plugin might let unapproved users upload harmful PHP files. This could give them full control over weak websites. The flaw, known as CVE-2026-15748, impacts Forminator Forms versions 1.56.1 and older and has a CVSS score of 9.8. Forminator Forms is a popular …

Apple has put out security updates for macOS, iOS, and iPadOS. These updates fix 28 problems that could let users lose data, crash apps, access kernel memory, and run unwanted code. The updates came out on August 17, 2026. They have macOS Tahoe 26.6.2, iOS 26.6.1, iPadOS 26.6.1, iOS 18.7.10, and …

SolarWinds has shared important security updates for its Serv-U file transfer software. These updates fix 15 problems that could let attackers get higher access and, in some cases, run code with root user rights. These fixes came in Serv-U version 2026.3, released on July 21, 2026, as part of the …