Windows BitLocker Vulnerabilities Security Feature Bypass and Privilege Elevation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft fixed three Windows BitLocker vulnerabilities CVE-2026-85920, CVE-2026-88070, and CVE-2026-83500 that could enable privilege escalation or bypass security protections in its October 2026 updates. BitLocker is a core Windows disk-encryption feature designed to protect data if a laptop, desktop, or …

Hackers Abuse Google Search to Attacks ITadmins with Weaponized PuTTY Installer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IT administrators searching Google for PuTTY may see a convincing fake download result mixed with legitimate links. Researchers documented a campaign that uses a lookalike website to deliver a malicious Windows installer disguised as the popular SSH client. The installer …

Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has patched an actively exploited Windows Shell zero-day vulnerability that allows attackers to bypass Mark of the Web protections. Tracked as CVE-2026-96951, the flaw was addressed in the October 2026 Patch Tuesday updates. It carries a CVSS score of …

OpenAI Engineer Arrested for Planting Spyware Device in an Executive Conference Room

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An OpenAI engineer has been arrested for allegedly hiding an audio recording device in an executive conference room at the company’s San Francisco offices. Abdulrahman Alfozan, 35, a Saudi national, was arrested on October 9, 2026, and appeared in federal …

Microsoft Patches More Than 1,400 Security Flaws

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch …

Microsoft Fixes 1,118 Vulnerabilities in October Patch Tuesday and Introduces New Risk Cohorts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft’s October 2026 Patch Tuesday briefing outlines 1,118 vulnerabilities across 15 risk groups, alongside a new approach designed to help security teams review large update releases. Called risk cohorts, these groups bring together flaws that require similar questions about an …

Critical FortiSandbox GUI Vulnerability Allows Remote Attackers to Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet disclosed a critical authentication-bypass vulnerability in the FortiSandbox graphical user interface that could let remote attackers access protected functions without valid credentials. Tracked as CVE-2026-107656, the flaw carries a reported CVSSv3 score of 9.6 and affects both FortiSandbox appliances …

TFG London Cyberattack Disrupts IT Systems Used by Phase Eight, Hobbs, and Whistles Brands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TFG London has confirmed a cyberattack that disrupted IT systems supporting Phase Eight, Hobbs, and Whistles. South Africa’s The Foschini Group detected the incident on October 11, 2026, and disclosed it to shareholders on October 13. Several systems remained unavailable, …

Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Docker has disclosed a critical Docker Hub vulnerability that could let attackers impersonate other users and publish container images under trusted names. Tracked as CVE-2026-105445, the flaw affected personal access tokens transferred during account conversions. Docker resolved the issue on …

CrowdStrike Joins Anthropic Defense Program to Advance AI-powered Defense for Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CrowdStrike has joined Anthropic’s Critical Infrastructure Defense Program to help strengthen AI-powered cybersecurity across energy, water, manufacturing, and transportation systems. Announced on October 8, 2026, the partnership combines CrowdStrike’s experience protecting business and industrial networks with Anthropic’s advanced Claude models, …