TL;DR Maintainers of the Open Enclave SDK fixed three severe bugs that let a rogue host break Intel SGX enclave safety. Led by a critical use-after-free flaw (GHSA-2rx6-6737-vpgh, CVSS 9.3), the bugs allow code...
Threat actors are actively exploiting a critical vulnerability inside the Xen Orchestra management platform. Specifically, this severe Xen Orchestra authentication bypass allows attackers to enter virtualization consoles without passwords. Adversaries simply manipulate a browser...
TL;DR ASUS released an urgent security update for ASUS router firmware to fix four bugs in its remote file access tool. Tracked as CVE-2026-88707 through CVE-2026-88710, the flaws let attackers run root commands or...
Malicious actors began exploiting a newly disclosed secure shell flaw in less than nine hours. Specifically, threat groups targeted the critical OpenSSH SSHole vulnerability across global internet infrastructure. Researchers confirmed active penetration attempts against...
Researchers recently discovered five zero-day vulnerabilities within the popular Ashlar-Vellum Cobalt computer-aided design software. Specifically, these critical flaws allow attackers to execute arbitrary code by manipulating complex drawing files. The Zero Day Initiative published...
Security researchers recently uncovered three vulnerabilities affecting the Philips Hue Bridge Pro smart lighting controller. Specifically, these flaws allow remote adversaries to compromise internal system processes completely. Attackers can chain authentication bypasses directly into...
The OpenSSH development team published an urgent security maintenance release. Specifically, this update mitigates a critical OpenSSH password bypass issue. Tracked as CVE-2026-123158, the defect allows remote attackers to circumvent authentication checks using invalid...
TL;DR Docker released Docker Desktop version 4.98.0 on November 3, 2026. The release resolves two critical Docker Desktop vulnerabilities in container runtimes. The worst flaw lets unprivileged containers break out of isolation on Windows...
TL;DR Elastic released new security updates on November 3, 2026. The advisories fix 12 Elastic security vulnerabilities across Elasticsearch, Kibana, APM Server, and Beats. These flaws allow traffic snooping, denial of service, and resource...
Canonical published an urgent advisory warning users of a critical security defect in LXD and MicroCloud. Specifically, this severe Canonical LXD vulnerability allows remote actors to bypass authentication protocols completely. Attackers who can reach...
TL;DR The Gitea project released version 28.3.0 on November 1, 2026. This major update resolves 18 Gitea vulnerabilities across web routes, API endpoints, and CI tools. These flaws allow stored cross-site scripting, token scope...
Cybersecurity investigators recently uncovered a sophisticated multi-stage intrusion against government-affiliated infrastructure. Specifically, adversaries compromised a public management portal to infiltrate internal enterprise networks. Consequently, the attackers breached twenty-five servers across sensitive environments. According to...
