Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates. Published on October 21, 2026, the alert assigns the flaw a CVSS 3.1 score of 9.1 and covers Oracle …

PwC Data Breach Claim – Everest Ransomware Group Claims to Have Stolen 590 GB of Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Everest ransomware group claims to have stolen 590.69 GB of data linked to PwC, the global professional services firm. The alleged haul includes human resources records, training files, and internal documents. The claim remains unverified, with no PwC response …

Critical Cisco Expressway Vulnerability Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has released security updates for a critical Cisco Expressway vulnerability that could let remote attackers run operating system commands as root. Tracked as CVE-2026-76466, the flaw carries a CVSS score of 9.8 and affects vulnerable Expressway devices configured in …

Splunk Fixes 24 Security Flaws, Including Four Critical Vulnerabilities in Enterprise and SOAR

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Splunk has released security updates for 24 vulnerabilities in Splunk Enterprise and Splunk SOAR, including four critical flaws with CVSS scores from 9.3 to 9.9. Splunk published the fixes on October 21, 2026, across three advisories covering access control, input …

Quest Diagnostics Hacked – Attackers Accessed the System to Order Tests and View Results

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Quest Diagnostics has disclosed a cyberattack involving unauthorized access to its Quanum LSM system, which healthcare clients use to order laboratory tests and view results. The company discovered the incident on October 21, 2026, and suspended access to the platform …

Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Several unpatched Linux-related security flaws were posted to public mailing lists in October, exposing technical details before fixes were ready. The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), include two critical flaws rated CVSS 9.0 that could let …

Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Contern, Luxembourg, October 22nd, 2026, CyberNewswire Gcore is offering its WAAP Enterprise plan free of charge to any government body or public agency until December 31, 2026. The offer follows the php2shell vulnerabilities that forced public websites offline across Europe …

Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Major U.S. banks are detecting third-party AI agents inside customer accounts, raising concerns that automated tools could act beyond the instructions customers give them. Some agents have contacted call centers or appeared to attempt independent actions, according to an Axios …

eMudhra Exits Global SSL/TLS Certificate Business Following the Vulnerability Disclosure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

eMudhra Limited has announced it is exiting the global SSL/TLS certificate business after disclosing weak private keys in eight intermediate certificate authority certificates. The October 22, 2026, decision follows emergency browser protections and growing questions about the company’s certificate issuance controls. eMudhra …

Claude Security Now Scans Repositories Continuously to Find Vulnerabilities and Track Fixes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic has updated Claude Security so it can keep checking connected code repositories as they change, rather than waiting for a person to start each scan. The service also tracks reported vulnerabilities after developers make changes, marks them fixed when …