Security news.
Patch Tuesday delivered record-breaking vulnerability counts alongside urgent warnings regarding active zero-day exploitation in enterprise infrastructure. CISA has mandated immediate updates for an actively targeted authentication bypass in Ivanti Connect Secure, while Microsoft released fixes for over 1,400 flaws including exploited zero-days. Critical security updates also landed for curl, Linux virtualization components, and Ghostscript.
CISA Urges Immediate Patch for Exploited Ivanti Zero-Day
Attackers are actively targeting CVE-2026-104935, an authentication bypass flaw in Ivanti Connect Secure that enables unauthenticated remote code execution with elevated privileges.
Microsoft Shatters Patch Records With 1,413 Flaws Fixed
The October Patch Tuesday release addresses an unprecedented 1,413 vulnerabilities, including CVE-2026-96951, a Windows command injection zero-day exploited in the wild.
curl Patches HTTP/2 Upload Flaw Enabling Client RCE
The curl project released version 8.23.0 to resolve a client-side memory corruption vulnerability triggered during HTTP/2 uploads that researchers weaponized to achieve remote code execution.
Critical Linux Kernel 'Vghost' Flaw Allows Guest-to-Host VM Escapes
Discovered in the vhost subsystem, CVE-2026-74580 enables local privilege escalation to root and permits untrusted virtual machines to break containment and overwrite host memory.
Ghostscript Buffer Overflow Exposes Servers via Malicious PDFs
A critical heap buffer overflow tracked as CVE-2026-39919 allows attackers to hijack servers and execute arbitrary code by supplying specially crafted PDF documents.
Microsoft Seizes Phishing Infrastructure Behind 1 Billion Messages
Following a federal court order, Microsoft and Health-ISAC disrupted major Chinese-language cybercrime platforms including YAM Store and CoGUI responsible for massive phishing campaigns.
Hirudo Android Malware Replaces Banking Apps to Evade Detection
Threat actors are deploying modified versions of legitimate banking applications on compromised Android devices, neutering internal security checks to harvest user credentials directly.
OpenAI Employee Arrested for Placing Recording Device in Office
Federal authorities arrested an OpenAI engineer after discovering a covert listening device planted in an executive conference room at the company's San Francisco headquarters.