Microsoft Patches More Than 1,400 Security Flaws

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch …

Microsoft Fixes 1,118 Vulnerabilities in October Patch Tuesday and Introduces New Risk Cohorts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft’s October 2026 Patch Tuesday briefing outlines 1,118 vulnerabilities across 15 risk groups, alongside a new approach designed to help security teams review large update releases. Called risk cohorts, these groups bring together flaws that require similar questions about an …

Critical FortiSandbox GUI Vulnerability Allows Remote Attackers to Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet disclosed a critical authentication-bypass vulnerability in the FortiSandbox graphical user interface that could let remote attackers access protected functions without valid credentials. Tracked as CVE-2026-107656, the flaw carries a reported CVSSv3 score of 9.6 and affects both FortiSandbox appliances …

TFG London Cyberattack Disrupts IT Systems Used by Phase Eight, Hobbs, and Whistles Brands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TFG London has confirmed a cyberattack that disrupted IT systems supporting Phase Eight, Hobbs, and Whistles. South Africa’s The Foschini Group detected the incident on October 11, 2026, and disclosed it to shareholders on October 13. Several systems remained unavailable, …

Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Docker has disclosed a critical Docker Hub vulnerability that could let attackers impersonate other users and publish container images under trusted names. Tracked as CVE-2026-105445, the flaw affected personal access tokens transferred during account conversions. Docker resolved the issue on …

CrowdStrike Joins Anthropic Defense Program to Advance AI-powered Defense for Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CrowdStrike has joined Anthropic’s Critical Infrastructure Defense Program to help strengthen AI-powered cybersecurity across energy, water, manufacturing, and transportation systems. Announced on October 8, 2026, the partnership combines CrowdStrike’s experience protecting business and industrial networks with Anthropic’s advanced Claude models, …

Zoom Clients for Certificate Validation Flaw Exposes Sensitive Information via Network Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two high-severity certificate validation flaws in Zoom clients could allow attackers without login credentials to access sensitive information over a network, according to advisory text dated October 13, 2026. The issues affect Windows clients and the My Notes feature across …

Ivanti Connect Secure 0-Day Flaw Actively Exploited in the Wild to Execute Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ivanti has disclosed an actively exploited zero-day vulnerability in Ivanti Connect Secure (ICS) that allows remote attackers to execute arbitrary commands without logging in. Tracked as CVE-2026-104935, the flaw carries a high-severity CVSS score of 8.6. Ivanti confirmed that exploitation …

Danfoss Refrigeration Hack Update – 4,980 Hosts Found Exposed to Internet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

France accounts for more than half of the internet-facing hosts found in a Shodan search for Danfoss web pages, following a cyberattack that disrupted supermarket refrigeration systems. An update from International Cyber Digest on October 13 reports a total of …

CISA Warns of Hackers Exploiting Two Citrix NetScaler 0-Days to Execute Code Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are actively exploiting two critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances, allowing them to execute code remotely on exposed systems. The flaws, tracked as CVE-2026-88771 and CVE-2026-88772, received a CVSS v4 severity score of …