Meta, Google, Microsoft and OpenAI Join Forces With Police to Dismantle West African Scam Networks
A coordinated operation involving Meta, Google, Microsoft, OpenAI, and law enforcement from ten countries removed more than 3.7 million fraudulent Facebook and Instagram accounts, led to 28 arrests,...
Public Exploit for Linux Kernel ‘Vghost’ Bug Shows Route From Local Access to Root, and Possibly VM Escape
Researchers have released a working proof-of-concept exploit for CVE-2026-74580, a high-severity Linux kernel flaw in the vhost networking subsystem that can let a local user escalate to root,...
Microsoft Patches Windows Shell Zero-Day Used to Evade Download Warnings
Microsoft has fixed CVE-2026-96951, an actively exploited Windows Shell flaw that can bypass Mark of the Web protections. Organizations should prioritize the October 2026 update while reinforcing controls...
Attackers Exploit Ivanti Connect Secure Zero-Day for Pre-Auth Command Execution
Ivanti says attackers exploited CVE-2026-104935 against a limited number of Connect Secure customers. The network-accessible authentication bypass can lead to arbitrary command execution without credentials or user interaction,...
Fortinet Warns of Critical FortiSandbox GUI Authentication Bypass
CVE-2026-107656 exposes affected FortiSandbox and FortiSandbox PaaS releases to remote authentication bypass through crafted HTTP requests. The CVSS 9.6 flaw can enable unauthorized commands, although Fortinet has reported...
Docker Hub Token Transfer Flaw Exposed Trusted Images to Impersonation Risk
Docker fixed CVE-2026-105445, a critical token-ownership flaw that could make an attacker's personal access token authenticate as another user after account conversion. Docker found no evidence of abuse,...
OpenAI Insider Charged With Secretly Recording Executive Boardroom Meetings
OpenAI says it discovered a hidden audio recorder wired into a USB port in an executive conference room, and U.S. prosecutors have charged an employee with intercepting private...
Microsoft’s October Patch Tuesday Fixes Over 1,100 Flaws and Debuts a New Way to Triage Them
Microsoft's October 2026 Patch Tuesday addressed 1,118 vulnerabilities, one of its largest releases yet, and introduced an experimental 'risk cohort' framework that groups flaws by the shared exposure...