CISA orders patch for Ivanti Connect Secure zero‑day after Oct 1 exploitation
The directive follows Volexity’s report of a three‑flaw chain granting root access and notes the flaw’s CVSS 8.6 rating.
patch
-
-
Hackers targeted refrigeration units in hundreds of French supermarkets
The attack set temperatures to 50°C and lengthened defrost cycles to up to eight hours, spoiling large quantities of food.
-
Microsoft’s September 2026 Patch Tuesday release nears 1,000 vulnerabilities, forcing CIOs to balance patching speed and scale as AI accelerates discovery
Microsoft reported nearly 1,000 vulnerabilities in its September 2026 Patch Tuesday release, with frontier AI models increasing vulnerability findings beyond traditional human review capacity
-
National vulnerability database publishes CVE‑2026‑68875, a buffer over‑read affecting the Windows NTFS driver
The flaw allows an authorized local user to run arbitrary code using the rights of that account.
-
NSA outlines 26 zero-trust measures to secure Department of War OT systems
The agency’s guidance targets legacy environments, emphasizing remote-access controls, asset inventories, and passive testing to avoid disrupting operations.
-
AI patches stop crashes but fail maintainer tests in Northwestern study
Researchers found AI agents halted crashes in about 90% of cases but passed original maintainers' test suites only about 61% of the time.
-
Microsoft warns Windows PCs missing key updates will lose security fixes in 2027
Devices without replacement certificates after May 17, 2027, and June 19, 2027, will stop receiving Windows Update patches.
-
US agencies warn Integrity Technology Group enables China‑linked critical‑infra attacks
The Oct. 8, 2026 advisory urges disabling unused services, patching vulnerabilities and using multifactor authentication.
-
FBI and six other countries link stolen-email portal to China-based firm
Advisory issued Oct. 8, 2026 said hackers tied to Integrity Technology Group stole email from government, law enforcement, healthcare and religious groups and ran a portal giving third parties access
-
CISA discloses security flaws in Satel Netco Design software Oct. 8, 2026
The advisory states that releases of Satel Netco Design earlier than version 2.1.7 are affected.
-
Project Zero releases emergency patching guidance for large vendors
Project Zero says the guidance describes four emergency patching methods: feature flags, filtering, alternate channels, and hotpatching.
-
Microsoft discloses Windows Media Foundation buffer overflow CVE-2026-62744
The unauthenticated flaw allows arbitrary code execution when a user opens, previews, or loads a streamed malicious media file, requiring no credentials.