A daily, automatically-compiled digest of the cyber security stories that broke in the last 24 hours, drawn from 12 trusted feeds. Each entry is a short excerpt — follow the link to read the full article at its original publisher. Compiled 13 October 2026 · 29 items.
Urgent Vulnerabilities 7
Actively exploited, critical, or high-severity flaws — patch or mitigate first.
CISA Current Activity13 Oct
KEV · exploited
- Exploited
- Yes — CISA KEV
- Product
- Ivanti Connect Secure
- Impact
- Authentication bypass
- Audience
- Network/firewall admins
- Action
- Patch per vendor / CISA KEV
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935 , affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploi…
Read at source →
CISA Current Activity13 Oct
KEV · exploited
- Exploited
- Yes — CISA KEV
- Product
- Microsoft Windows
- Impact
- Command injection
- Audience
- Windows admins
- Action
- Patch per vendor / CISA KEV
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure…
Read at source →
CVEDatabase - Critical CVEs13 Oct
CriticalCVSS 9.6
CVSS 9.6 CRITICAL · Vendor: Adobe ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute…
Read at source →
CVEDatabase - Critical CVEs13 Oct
CriticalCVSS 9.1
- Impact
- Authentication bypass
- Action
- Patch when a fix is available; monitor exposure
CVSS 9.1 CRITICAL · Vendor: IBM IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.
Read at source →
CVEDatabase - Critical CVEs13 Oct
CriticalCVSS 9.1
CVSS 9.1 CRITICAL · Vendor: IBM IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
Read at source →
CVEDatabase - Critical CVEs13 Oct
CriticalCVSS 9.3
- Impact
- Path traversal
- Action
- Patch when a fix is available; monitor exposure
CVSS 9.3 CRITICAL · Vendor: Adobe ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this v…
Read at source →
CVEDatabase - Recent CVEs13 Oct
HighCVSS 7.1
- Impact
- Denial of service
- Audience
- Windows admins
- Action
- Patch when a fix is available; monitor exposure
CVSS 7.1 HIGH An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options
Read at source →
Other CVEs 4
Lower-severity or unconfirmed-exploitation vulnerabilities.
CVEDatabase - Recent CVEs13 Oct
MediumCVSS 6.9
- Impact
- Privilege escalation
- Audience
- Windows admins
- Action
- Patch when a fix is available; monitor exposure
CVSS 6.9 MEDIUM Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3.
Read at source →
BleepingComputer13 Oct
- Impact
- Remote code execution
- Action
- Patch when a fix is available; monitor exposure
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]
Read at source →
CVEDatabase - Recent CVEs13 Oct
MediumCVSS 5.1
- Audience
- Network/firewall admins
- Action
- Patch when a fix is available; monitor exposure
CVSS 5.1 MEDIUM · Vendor: Citrix Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
Read at source →
CVEDatabase - Recent CVEs13 Oct
MediumCVSS 6.9
- Audience
- Network/firewall admins
- Action
- Patch when a fix is available; monitor exposure
CVSS 6.9 MEDIUM · Vendor: Citrix Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
Read at source →
Threat Activity 16
Malware, campaigns and adversary tradecraft.
Dark Reading13 Oct
Exploited
The scary surprises for the largest security update ever include security bypasses and unauthenticated RCEs.
Read at source →
BleepingComputer13 Oct
Exploited
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]
Read at source →
The Hacker News13 Oct
Exploited
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on…
Read at source →
CISA Cybersecurity Advisories13 Oct
KEV · exploited
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. The following versions of Swann Communications SWIFI-SE2KIC are affected: SWIFI-SE2KIC firmware <=…
Read at source →
CISA Cybersecurity Advisories13 Oct
KEV · exploited
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. The following versions of Inductive Automation Ignition Software are affected: Igni…
Read at source →
The Hacker News13 Oct
CriticalCVSS 10
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology…
Read at source →
Krebs on Security13 Oct
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times…
Read at source →
Cisco Talos13 Oct
Blog post covering the vulnerabilities disclosed during Microsoft Patch Tuesday.
Read at source →
BleepingComputer13 Oct
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record sensitive conversations. [...]
Read at source →
BleepingComputer13 Oct
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers.…
Read at source →
The Hacker News13 Oct
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The frontier AI lab said sma…
Read at source →
The Hacker News13 Oct
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it…
Read at source →
Palo Alto Unit 4213 Oct
Unit 42 dissects a cyberattack targeting a European bank's IT infrastructure, delivering concrete defense strategies to help organizations detect and counter comparable threats. The post The Noise Inside the Network: How an Unsophisticated…
Read at source →
Dark Reading13 Oct
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Read at source →
Dark Reading13 Oct
Anthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
Read at source →
TrustedSec Blog13 Oct
<p>TrustedSec is proud to announce its partnership with OpenAI’s Daybreak Defense Network. Our Founder and CEO David Kennedy explains what it all entails.</p>
Read at source →