Microsoft’s October 2026 Patch Tuesday briefing outlines 1,118 vulnerabilities across 15 risk groups, alongside a new approach designed to help security…
Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images
Docker has disclosed a critical Docker Hub vulnerability that could let attackers impersonate other users and publish container images under trusted…
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no…
TFG London Cyberattack Disrupts IT Systems Used by Phase Eight, Hobbs, and Whistles Brands
TFG London has confirmed a cyberattack that disrupted IT systems supporting Phase Eight, Hobbs, and Whistles. South Africa’s The Foschini Group detected…
FTC says ‘sextortion’ protection companies deceived customers about services
A federal lawsuit claims that Dmitry Belkin and his companies routinely failed to deliver on services to protect customers, generated fake evidence and…
CrowdStrike Joins Anthropic Defense Program to Advance AI-powered Defense for Critical Infrastructure
CrowdStrike has joined Anthropic’s Critical Infrastructure Defense Program to help strengthen AI-powered cybersecurity across energy, water,…
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker…
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity…
U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S.…
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand…
UK Housing Ombudsman Service investigates ‘security incident’
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. […]
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory…
IT Security News Hourly Summary 2026-10-13 21h : 4 posts
4 posts published in the last hour 18:31GitLab Warns of CVSS 10.0 Flaw That Could Allow Server Takeover 18:01Windows 11 KB5127648 & KB5126653 cumulative updates released 18:01LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys 18:00IT Security…
GitLab Warns of CVSS 10.0 Flaw That Could Allow Server Takeover
GitLab has released urgent security updates for a maximum-severity vulnerability that could allow attackers to execute malicious code on affected servers.…
Windows 11 KB5127648 & KB5126653 cumulative updates released
Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs…
LiteLLM flaws let low-privileged users hijack AI gateway and steal provider keys
Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI…
IT Security News Hourly Summary 2026-10-13 20h : 11 posts
11 posts published in the last hour 17:31Claude submitted fake murder tip to Philly police during summertime testing 17:31Best NinjaOne Alternatives for Endpoint, Patch, and Vulnerability Management 17:31Adobe Patches 140 Vulnerabilities Across 10 Products 17:31Pluto Security raises $42M as AI…
Claude submitted fake murder tip to Philly police during summertime testing
Anthropic took more than two months to alert cops
Best NinjaOne Alternatives for Endpoint, Patch, and Vulnerability Management
Compare the best NinjaOne Alternatives for endpoint management, patch management, remote monitoring, IT automation and MSP security workflows.
Adobe Patches 140 Vulnerabilities Across 10 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
Pluto Security raises $42M as AI gives enterprise security teams a new headache
Pluto Security has raised $42 million Jump Capital, TLV Partners, Ansa Capital and angel investors.
Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935 , a high-severity authentication bypass by spoofing ( CWE-290 )…
Google Partially Reverses Chrome Bug Bounty Cuts
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.