Cyberattack on French Grocers Highlights Risks of Unpatched Refrigeration Systems
PremiumHundreds of grocery stores lost millions after third-party-managed, outdated OT fridge firmware caused failures and outages.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesToday
Critical Bug in Claude Code Desktop Exposes Sensitive Developer Credentials
PremiumAnthropic SneakPeek bug in Claude Code Desktop preview pane can silently exfiltrate SSH keys, AWS credentials and OAuth tokens.
CISA Alerts on Ivanti and Microsoft Vulnerabilities Amid Record Patch Tuesday
PremiumCISA issues warning about newly exploited Ivanti vulnerability while Microsoft ships record-breaking Patch Tuesday fixes.
Security Experts Use AI to Develop Chrome Exploit in Record Time
PremiumResearchers used a public GPT-5.6 model to craft a full-chain Chrome exploit in six days, leading Google to patch three bugs.
AI Agent Uncovers Critical OTP Bypass Vulnerability in Major Insurer's Website
PremiumAn AI pentesting agent autonomously discovered a critical OTP routing bypass in a live insurer site, enabling account takeover.
Ivanti Connect Secure Faces Exploitation of Critical Zero-Day Vulnerability
PremiumBSI warns multiple Ivanti Connect Secure zero-days are being actively exploited, enabling auth bypass and remote code execution.
Critical Windows Shell Vulnerability Patched Amid Active Exploitation
PremiumMicrosoft patched actively exploited Windows Shell zero-day CVE-2026-96951 that bypasses Mark of the Web protections (CVSS 8.8).
Critical Vulnerability in Collabora Exploited to Compromise Nextcloud Servers
PremiumAttackers exploited Collabora Online CODE Server RCE (CVE-2026-110447) to plant web shells and backdoor Nextcloud servers.
Critical Flaw in ChatGPT's GitHub Integration Exposes Private Repository Secrets
PremiumCritical ChatGPT GitHub integration flaw could be manipulated to modify private repos and exfiltrate repository secrets via Actions.
Next.js Releases Urgent Update to Address Critical Security Vulnerabilities
PremiumNext.js emergency update fixes two critical unauthenticated RCEs in React Server Components and librsvg/Sharp SVG processing.
Ivanti's Zero-Day Challenge: Navigating Vulnerability Management
PremiumIvanti ICS zero-day CVE-2026-104935 highlights incomplete patches and operational obstacles leaving ICS environments exposed to RCE.
Drupal Addresses Critical Security Vulnerability in Field UI Module
PremiumDrupal Field UI core flaw enables unauthenticated remote code execution via contributed modules; patches released for Drupal 10/11.
Microsoft Sets New Record with Patch Tuesday, Addressing Over 1,400 Vulnerabilities
PremiumMicrosoft released fixes for 1,413 vulnerabilities including an actively exploited Windows Shell zero-day; prioritize high-severity updates.
Palo Alto Networks Urges Immediate Patching for Critical PAN-OS Vulnerability
PremiumPAN-OS authenticated RCE (CVE-2026-0322) observed in limited exploitation against firewalls; immediate patching urged.
Cisco Addresses Critical Vulnerability in Secure Email Gateway
PremiumCritical Cisco Secure Email Gateway zero-day allows unauthenticated email to write files and execute root commands; patches available.
Wednesday, October 14
Cyberattack Exploits Refrigeration Systems in French Retail Stores
SANS digest: retail refrigeration attacks, GitLab CVSS 10.0 patch, and possible attacker ID via AI session logs affecting banking investigation.
Zoom Flaws Risk Sensitive Data Exposure via Network Access
Certificate validation flaws in Zoom clients could allow attackers to access sensitive notes and data without authentication via network control.
Critical Vulnerabilities in LG Smart TVs Allow Root Access via Local Network
Chained webOS vulnerabilities let local-network attackers gain root access on affected LG Smart TV models without owner interaction or PIN.
Critical SSRF Flaw in SonicWall SMA Devices Under Active Exploitation
Critical SSRF in SonicWall SMA appliances under active attack, putting customers at risk of remote compromise.
Ransomware Groups Exploit Long-Standing Palo Alto VPN Vulnerability
ReliaQuest reports Qilin and Settra ransomware groups actively exploit a Palo Alto VPN vulnerability patched in May but still widespread.
Get these articles delivered to your inbox.
Subscribe free