🟠 CVE-2026-86047 - High (7.7)

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19...

https://www.thehackerwire.com/vulnerability/CVE-2026-86047/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-97380 - High (8.8)

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19...

https://www.thehackerwire.com/vulnerability/CVE-2026-97380/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🚨 BREAKING: BeyondTrust Remote Support flaw CVE-2026-102764 is being actively exploited, CISA warns

CVE-2026-102764 · CVSS 9.3 Critical · US federal deadline October 19, 2026 · CISA KEV

#cybersecurity #vulnerability

Claude Code Desktop’s preview pane could let malicious HTML steal SSH keys, cloud credentials, GitHub and npm tokens. Anthropic fixed it after an initial patch was bypassed.

Listen/Read: hackread.com/claude-code-...

#Cybersecurity #ClaudeCode #Vulnerability #AI

Federal agencies have until today to patch the Ivanti Connect Secure authentication bypass (CVE-2026-104935) and the Microsoft Windows command injection flaw (CVE-2026-96951). The rest of us?

#vulnerability #infosec

Microsoft Patch Tuesday, October 2026 Security Update Review
blog.qualys.com/vulnerabilit...

1414 vulnerabilities addressed, including 78 critical.
#CyberSecurity #InfoSec #Vulnerability

🔴 CVE-2026-44977 - Critical (9)

countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.5...

https://www.thehackerwire.com/vulnerability/CVE-2026-44977/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-48741 - High (7.5)

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including M...

https://www.thehackerwire.com/vulnerability/CVE-2026-48741/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-48503 - High (7.5)

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including M...

https://www.thehackerwire.com/vulnerability/CVE-2026-48503/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

Researchers warned attackers could 'defrost the food' months before French supermarkets got hit
www.theregister.com/security/202...

Widespread compromises involving Danfoss refrigeration controllers even though security firm raised the alarm in August.
#CyberSecurity #Vulnerability #InfoSec

CISA adds 4 actively exploited vulnerabilities to its KEV catalog. Flaws in Palo Alto PAN-OS (CVE-2026-0322), Cisco SEG (CVE-2026-76519), & AhsayCBS (CVE-2026-105133/4) require immediate patching. #CISA #KEV #Vulnerability

🌐 cyber[.]netsecops[.]io

🟠 CVE-2026-105958 - High (7.5)

A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets fr...

https://www.thehackerwire.com/vulnerability/CVE-2026-105958/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107564 - High (7.5)

An unauthenticated remote attacker may use an allocation of resources without limits or throttlin...

https://www.thehackerwire.com/vulnerability/CVE-2026-107564/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-111399 - High (8.5)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...

https://www.thehackerwire.com/vulnerability/CVE-2026-111399/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

Vulnerability Watch, October 16, 2026: 12 critical CVEs and 88 new vendor and CERT advisories

12 critical CVEs · 88 advisories · NIST NVD, CERTs & vendors

#cybersecurity #vulnerability

F5 & Juniper Networks address CRITICAL RCE bugs in NGINX, Junos OS & more. No active exploitation yet — patch immediately to prevent device takeover. Details: https://radar.offseq.com/threat/f5-juniper-networks-patch-critical-vulnerabilities-85280fb8b973d5ad #OffSeq #vulnerability #patchnow

Malware evasion made easier with AI — but behavior still gives it away

www.csoonline.com/article/4235...

#Cybersecurity #ThreatIntel #Vulnerability

Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say

www.csoonline.com/article/4236...

#Cybersecurity #ThreatIntel #Vulnerability

BAE Systems cyberattack disrupts US federal court operations

www.bleepingcomputer.com/news/securit...

#Cybersecurity #ThreatIntel #Vulnerability

Patch CVE-2026-102764 now. This critical BeyondTrust Remote Support vulnerability is exploited in the wild as an ARMORY CASTLE zero-day.

#BeyondTrust #CVE2026102764 #ZeroDay #ArmoryCastle #Mandiant #Cybersecurity #Vulnerability #InfoSec