InfoSecBulletin Cybersecurity for mankind
Zoom released four security updates on October 13, 2026, all addressing serious problems. Two Zoom Workplace issues let users gain higher access, while the other two can expose information due to weak certificate checks. Updating to Zoom Workplace 7.2.0 or newer fixes most of these issues.
| CVE | CVSS (CVSSv3) | Type | Fixed in | Status |
|---|---|---|---|---|
| CVE-2026-53418 | 8.1 | CWE-939 | 7.2.1 | Not exploited |
| CVE-2026-53420 | 8 | CWE-120 | 7.2.0 | Not exploited |
| CVE-2026-108184 | 7.4 | CWE-295 | — | Not exploited |
| CVE-2026-108185 | 7.4 | CWE-295 | — | Not exploited |
NVIDIA
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
WinRAR, WordPress RCE flaw & Zyxel GS1900 Zero-Day exploited in the wild
Daily Cyber security update for 04.11. 2026
Daily Cyber security update for 03.11. 2026
Using ARTEX AI, Hacker to attack 200 Organizations Across 14 Countries
Amadeus cyber incident impacted “Cathay Pacific, Qantas, Japan, Malaysia, Korean & Asiana” Airlines
Multiple European supermarket fridges got hacked: Temperatures reached high as 55°C
Apple Warns 99 Countries iPhone Users of Mercenary Spyware Attacks
Daily Cyber security update for 31.10. 2026
NVIDIA put out six security updates on October 13, 2026, to fix 18 problems in its AI software. Eight are issues in NVIDIA AIStore, one of which is CVE-2026-65162, a serious CVSS 10.0 bug that can allow remote code execution. All eight AIStore flaws carry a “no privileges required” rating.
Notable CVEs
| CVE | CVSS (CVSSv3) | Type | Status |
|---|---|---|---|
| CVE-2026-65162 | 10 | CWE-250 | Not exploited |
| CVE-2026-65173 | 9.1 | CWE-306 | Not exploited |
| CVE-2026-65172 | 8.6 | CWE-862 | Not exploited |
| CVE-2026-65170 | 8.6 | CWE-918 | Not exploited |
| CVE-2026-65101 | 8.6 | CWE-918 | Not exploited |
| CVE-2026-65164 | 8.1 | CWE-22 | Not exploited |
| CVE-2026-65103 | 8.1 | CWE-22 | Not exploited |
| CVE-2026-65180 | 7.8 | CWE-502 | Not exploited |
Affected Versions:
AIStore: all versions through 4.9 on Linux
Megatron-LM: versions before 0.17.1
DALI: versions through 2.2
Isaac Lab: versions through 2.3.2
NVSentinel: version 1.19.0
Warp: versions 1.13.0, 1.14.0 and 1.15.0
Patch and Mitigation Steps:
Upgrade AIStore to version 5.0.
Update Megatron-LM to 0.17.1 or later.
Move DALI to 2.3, Isaac Lab to 3.0-beta2, NVSentinel to 1.20.0 and Warp to 1.16.0.
Keep AIStore proxies and targets off public networks, and restrict access to its APIs.
Only load model checkpoints from trusted sources.
IBM
IBM released two security notices about four flaws in IBM WebSphere Liberty. Two serious issues, CVE-2026-93895 and CVE-2026-93909, have a CVSS base score of 9.1 and let people bypass authentication or access controls. Admins should quickly use the interim fixes for APAR DT502929 and APAR DT502359.
| CVE | CVSS (CVSSv3) | Type | Status |
|---|---|---|---|
| CVE-2026-93895 | 9.1 | CWE-284 | Not exploited |
| CVE-2026-93909 | 9.1 | CWE-384 | Not exploited |
| CVE-2026-95695 | 7.4 | CWE-863 | Not exploited |
| CVE-2026-95696 | 6.5 | CWE-400 | Not exploited |
Patch and Mitigation Steps:
In both notices, “IBM strongly recommends addressing the vulnerability now by applying a currently available interim fix or fix pack.” Administrators using the grpc-1.0 feature on versions 20.0.0.12 through 26.0.0.10 must apply the interim fix for APAR DT502929. Similarly, teams running samlWeb-2.0 on versions 17.0.0.3 through 26.0.0.10 should install the interim fix for APAR DT502359. Alternatively, organizations can upgrade to IBM WebSphere Liberty Fix Pack 26.0.0.11 or later, targeted for fourth-quarter 2026 availability.
