1. Executive summary Ivanti has released out-of-band fixes for CVE-2026-104935, an authentication bypass by spoofing (CWE-290) in Connect Secure (ICS) that
situation 1. Executive summary ANSSI's CERT-FR published advisory CERTFR-2026-AVI-1312 on 14 October 2026 covering multiple vulnerabilities in Microsoft Office, affecting
1. Executive summary On 8 October 2026 the United Kingdom sanctioned Cryptomus (formerly Certa Payments, formerly Xeltox Enterprises, now also operating as Heleket) for processing payments
1. Executive summary Cisco Talos and Recorded Future's Insikt Group have jointly documented UAT-6275 (tracked by Recorded Future as TAG-193), a suspected
1. Executive summary Microsoft's Digital Crimes Unit, working with Resecurity and law enforcement partners, has published research on a Chinese-language phishing ecosystem built
1. Executive summary Microsoft's Digital Crimes Unit, working with Japan's National Police Agency and Health-ISAC, obtained a U.S. court order
1. Executive summary Elastic published a methodology post describing how it evaluates large language models for use in security operations workflows, built around a synthetic intrusion
1. Executive summary Ivanti Connect Secure (ICS) is being exploited in the wild through CVE-2026-104935, an authentication bypass by spoofing (CWE-290) rated CVSS
1. Executive summary Microsoft's October 2026 Patch Tuesday fixes a record 1,413 vulnerabilities, including CVE-2026-96951, a Windows Shell security feature bypass
1. Executive summary CVE-2026-74580, named Vghost, is a flaw in the Linux kernel's vhost subsystem that lets a local user read and
1. Executive summary SAP has released its October 2026 security patch package, addressing critical-severity vulnerabilities in SAP NetWeaver and S/4HANA. The flaws could allow
1. Executive summary Huntress has published a walkthrough of a ClickFix chain that moves from a poisoned search result to full business email compromise in roughly