What Happened on October 13 Microsoft released its October 2026 Patch Tuesday updates on October 13, 2026, and the size of the release broke every previous record. By BleepingComputer’s count, the updates fixed 1,411 vulnerabilities, including one actively exploited zero-day and two publicly disclosed zero-days. The total covers only flaws released on Patch Tuesday itself….
On October 13, 2026, Ivanti disclosed an actively exploited zero-day vulnerability in its Connect Secure VPN appliances and urged customers to patch immediately. The flaw, tracked as CVE-2026-104935, lets a remote attacker bypass authentication and run arbitrary commands on the appliance without logging in. Worse, researchers at Volexity found an unknown threat actor chaining it…
Progress Software has disclosed 31 new security vulnerabilities in MarkLogic Server, its flagship enterprise database platform, including five flaws rated critical. The most serious ones let users with only limited, delegated privileges climb all the way to full administrative control of the server. Patches have existed since September 10 in MarkLogic 11.3.7 and 12.1.0, but…
The short version: Apple has announced HomeView, its first dedicated smart home hub, priced at $299 in the US. Pre-orders opened on October 13, 2026, and the device starts shipping on November 13. It centers on a 7-inch square touchscreen with a brand new conversational Siri AI, and it comes in two versions: a tabletop…
A public exploit is now circulating for a critical vulnerability in AnyDesk for Linux that lets an attacker run commands as root on a remote machine before the user ever approves the session. The flaw, tracked as CVE-2026-109390 and dubbed AnyPwn by the researchers who found it, carries a CVSS score of 9.8 out of…
The short answer: Overnight on October 11-12, 2026, attackers seized remote control of Danfoss refrigeration controllers in roughly 500 French supermarkets and forced the systems into continuous defrost mode at 50°C (122°F), spoiling fresh and frozen food worth millions of euros. Paris prosecutors and the national cybersecurity agency ANSSI are investigating; no group has claimed…
The short answer If your WordPress site uses the Bricksforge plugin, update it today. A maximum-severity vulnerability, tracked as CVE-2026-85097, lets attackers take over a vulnerable site without logging in. Attackers started exploiting it within hours of its discovery, and every internet-connected site running an affected version is a target. The fix is simple: update…
On October 12, 2026, GitLab released an emergency security update for one of the most dangerous classes of bugs a server can have: an unauthenticated remote code execution vulnerability. Tracked as CVE-2026-97229, the flaw carries the maximum CVSS severity score of 10.0 and affects self-managed GitLab Community Edition and Enterprise Edition servers. If you run…
Microsoft’s Maia 300 is the company’s third-generation custom AI chip, announced on October 12, 2026. Microsoft says it plans to deploy potentially more than a million of the chips next year to power its own AI services, with multi-gigawatt rollouts starting in 2027. The chip uses TSMC’s 2-nanometer technology for its core computing chiplets and,…
Microsoft co-founder Bill Gates says the world should brace for a wave of AI-driven cyberattacks over the next year. Speaking to CNN’s Jake Tapper on State of the Union on October 11, 2026, Gates warned that criminals are gaining access to powerful AI models without adequate safeguards, and the combination could produce what he called…