Mobile Security & Privacy Threat Actors Begin Exploiting Critical Oracle E-Business Suite Vulnerability Shortly After Patch Release October 28, 2026 Nana Wu Threat intelligence and cybersecurity firms are sounding the alarm after detecting early exploratory attacks targeting a newly patched, critical vulnerability affecting the Oracle E-Business Suite (EBS). The flaw, which carries…
Linux & Open Source Ubuntu Rolls Out Critical Security Updates to Address High-Severity "php2shell" Vulnerability and eMudhra Certificate Compromise October 22, 2026 Azzam Bilal Chamdy Ubuntu has officially released urgent security updates designed to mitigate the severe "php2shell" PHP vulnerability, an issue that has already forced numerous websites offline and triggered widespread alarm across the…
Mobile Security & Privacy Critical Maximum-Severity Vulnerability Exposes GitLab Self-Managed Servers Dating Back to 2014 October 21, 2026 Nila Kartika Wati GitLab has issued emergency security updates to address a maximum-severity, unauthenticated remote code execution vulnerability that impacts nearly every self-managed version of its software released over the past twelve years,…
Mobile Security & Privacy Critical Drupal Core Vulnerability Exposes Sites to Remote Code Execution via Field UI Module October 15, 2026 Ali Ikhwan Drupal has issued urgent security updates to address a critical remote code execution vulnerability residing within its core Field UI module. Tracked under the identifier CVE-2026-108097, the flaw poses a…
Mobile Security & Privacy CISA Urges Immediate Patching of Actively Exploited Ivanti Connect Secure Zero-Day Vulnerability October 14, 2026 Laily UPN The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for organizations worldwide to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest…
Mobile Security & Privacy Critical Open-Source Office Vulnerability Allows Code Execution via Malicious Spreadsheets Without Warning October 6, 2026 Asep Darmawan Security researchers have uncovered a critical security vulnerability affecting two of the world’s most popular open-source office suites, LibreOffice and Apache OpenOffice. The flaw allows a maliciously crafted spreadsheet to…
Mobile Security & Privacy Critical GitLab AI Gateway Vulnerability Threatens Self-Hosted Instances With Remote Code Execution October 2, 2026 Ammar Sabilarrohman GitLab has issued an urgent security advisory warning administrators of a critical vulnerability affecting its AI Gateway service. The security flaw, which has been assigned the identifier CVE-2026-90970, carries a…
Mobile Security & Privacy CISA Adds Critical Fortinet FortiMail Vulnerability to KEV Catalog Following Active Exploitation October 2, 2026 Lina Hope The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following credible reports of active exploitation…
Mobile Security & Privacy Google Warns of Renewed Mass Exploitation of Oracle PeopleSoft Vulnerability as ShinyHunters Linked to Global Campaign September 27, 2026 rifanmuazin Google has issued a serious warning regarding a renewed wave of mass exploitation targeting a known security vulnerability in Oracle PeopleSoft. The campaign, which impacts multiple sectors across the globe,…
Linux & Open Source Ubuntu Kernel Updates Move to Faster Cadence to Combat AI-Driven Vulnerability Surge September 24, 2026 Suro Senen Canonical has announced a major shift in its kernel maintenance strategy for Ubuntu, moving to a more frequent release cycle in response to what the company describes as an explosion…
