Install
Security Alerts & Patches
High-impact vulnerabilities, emergency patches, supply-chain incidents, and mitigations.
- 9 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in Security Alerts & Patches
BTCPay Server 2.4.5 tightens security and speeds up invoices
51+ min ago (573+ words) The latest release hardens Lightning requests, trims old Docker integrations, and makes Tor a manual opt-in after updating BTCPay Server has shipped version 2.4.5, and the headline features are tighter security and faster invoices. There is one catch worth reading twice....
WordPress 7.1.3 Fixes SQL Injection, Stored XSS Flaws
26+ min ago (455+ words) We couldn't find any blog articles matching your search. Try searching for other cybersecurity topics or keywords. Three of the seven flaws, including a second-order SQL injection in the WXR exporter, were reported by AI company Anthropic. Vivek is a…...
CVE-2026-106016: Path Traversal Mitigation Bypass in @fastify/static File Handling (Node.js) – Analysis, Impact, and Remediation
2+ hour, 46+ min ago (349+ words) The root cause is the order of normalization and filtering: the underlying send library normalizes dot segments before applying its own path-traversal guard, which means that malicious path segments can evade middleware checks. The vulnerability does not allow access outside…...
IBM Patches Critical Langflow Vulnerabilities Enabling Remote Code Execution
10+ hour, 10+ min ago (196+ words) IBM has disclosed 25 vulnerabilities affecting Langflow OSS, including two critical flaws that allow unauthenticated remote code execution. The October 2, 2026, security bulletin identifies versions 1.0.0 through 1.12.2 as affected and recommends upgrading to version 1.12.3. Langflow provides a visual environment for building AI agents…...
Critical CVE-2026-18397: Remote Code Execution Vulnerability in Thales SConnect Threatens SWIFT Banking and Government Authentication Systems
3+ hour, 59+ min ago (186+ words) Proof-of-concept code was demonstrated by a Bay Area Labs researcher, and exploit development has been accelerated by the use of AI agents, lowering the technical barrier for non-nation-state actors. The vulnerability affects all SConnect browser extension versions released prior to…...
WordPress 7.1.3 Maintenance and Security Release
1+ hour, 24+ min ago (250+ words) This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.3 from WordPress.org, or visit your WordPress Dashboard, click “Updates…...
Microsoft Releases Exchange Update for Privilege Escalation Flaw
1+ hour, 18+ min ago (305+ words) Manage AD, Entra ID and Microsoft 365. Detect threats, rollback unwanted changes and recover instantly. Microsoft says the flaw is “more likely” to be exploited, making the latest Exchange Server update a priority for on-premises deployments. Microsoft has released an out-of-band…...
AMD's Instinct security bulletin names two CVEs for one flaw, and explains only one
2+ hour, 40+ min ago (485+ words) AMD's security bulletin AMD-SB-6033, published on September 30, describes a single flaw in the ROCm Communication Collectives Library and gives it the identifier CVE-2026-43598. Every one of the nine products it lists as affected carries a different identifier, CVE-2026-54974, which the…...
CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely
4+ hour, 19+ min ago (371+ words) FBI Drops Accenture Contractor After Sensitive Data Breach Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access Denmark ’s Population Registry Breached, 8.8 Million Affected U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities…...
Windows DirectX Graphics Kernel Vulnerability Could Allow Privilege Escalation (CVE-2026-50375)
6+ hour, 36+ min ago (831+ words) A security vulnerability in Microsoft Windows could allow a local attacker to elevate their privileges and potentially execute code with Windows kernel-level permissions. The vulnerability, tracked as CVE-2026-50375, affects the Windows DirectX Graphics Kernel and was addressed by Microsoft in…...