Short answer: Ahsay Backup has released new emergency hotfixes for AhsayCBS after admitting its August patches for two actively exploited vulnerabilities did not fully close the holes. If you run AhsayCBS, you need to apply the new hotfix and reboot your server now: CISA has added both flaws to its Known Exploited Vulnerabilities catalog with…
Palo Alto Networks has patched an actively exploited zero-day in its PAN-OS firewall software. The flaw, tracked as CVE-2026-0322, lets an authenticated attacker with access to the management interface run code as root on the firewall. Here is the short version: if you run PA-Series, VM-Series, or Panorama appliances, patch to the fixed PAN-OS release…
Cohere has signed a letter of intent to acquire AISLE, the AI cybersecurity startup whose software has found more than 500 real vulnerabilities in its first year. Announced on October 15, 2026, the deal folds AISLE’s AI-powered vulnerability discovery into the business Cohere is assembling through its merger with Germany’s Aleph Alpha, a combination reported…
On October 14, 2026, Block, the company behind Square, Cash App, and Afterpay, and OpenAI jointly disclosed that Block’s security team now runs core parts of its cybersecurity operations on autonomous AI agents. The centerpiece is a system called Daybreak, a model-routing harness the two companies built together on top of OpenAI’s Defense Factory program….
On October 14, 2026, Cisco disclosed a critical zero-day vulnerability in its Secure Email Gateway that attackers are already exploiting in the wild. Tracked as CVE-2026-76519 and rated 9.8 out of 10 on the CVSS severity scale, the flaw lets an attacker send a single crafted email attachment and potentially run commands as root on…
Meta has sold millions of smart glasses, but the one complaint kept coming up louder than all the others: the camera. On October 13, 2026, Meta finally removed it. The Ray-Ban Meta Audio glasses, which went on sale in the US this week starting at $349, are Meta’s first camera-free smart glasses — open-ear audio,…
Direct answer SAP CVE-2026-89111 is a maximum-severity OAuth2 server-side request forgery (SSRF) flaw in the SAP Cloud SDK for Python, rated CVSS 10.0. It affects multi-tenant applications built on SAP Business Technology Platform (BTP) that use Cloud SDK for Python versions before 0.45.2. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests…
Short answer: update both browsers today If you use Google Chrome or Mozilla Firefox, update them now. On October 13, 2026, Google and Mozilla shipped security updates that fix a combined 114 vulnerabilities: 37 in Chrome 155 and 77 in Firefox 158. Seven of the Chrome flaws are rated critical, and 30 of the Firefox…
What Happened on October 13 Microsoft released its October 2026 Patch Tuesday updates on October 13, 2026, and the size of the release broke every previous record. By BleepingComputer’s count, the updates fixed 1,411 vulnerabilities, including one actively exploited zero-day and two publicly disclosed zero-days. The total covers only flaws released on Patch Tuesday itself….
On October 13, 2026, Ivanti disclosed an actively exploited zero-day vulnerability in its Connect Secure VPN appliances and urged customers to patch immediately. The flaw, tracked as CVE-2026-104935, lets a remote attacker bypass authentication and run arbitrary commands on the appliance without logging in. Worse, researchers at Volexity found an unknown threat actor chaining it…