Cybersecurity

Dell has released version 1.18.0 of its Container Storage Modules software, closing two flaws the company rates at 10.0, the top of the CVSS scale vendors use to rank severity. Dell classifies both…

Fortinet says attackers are already exploiting a flaw in FortiMail, its email security gateway, and the company has not yet released a version that fixes it. The advisory, published Oct. 1 as…

Cisco has released fixed software for a flaw in Catalyst SD-WAN Manager that its own product security team says is being exploited. The U.S. Cybersecurity and Infrastructure Security Agency added the…

Researchers at the VUSec group at VU Amsterdam and at Scuola Superiore Sant'Anna disclosed a new variant of the Spectre-v2 processor attack on Sept. 29, 2026. Fixes have already shipped for the Linux…

On Sept. 25, Microsoft Security Research published an account of an Azure intrusion in which two compromised service principals, the machine identities applications use to sign in to cloud services,…

Open a folder and the listing fills itself in. Drop a file into it from somewhere else and the window updates before you can blink. Your computer is not checking that folder over and over to notice;…

Apple has released iOS 26.7.1 and iPadOS 26.7.1, an update that fixes a flaw in CoreGraphics, the graphics software built into both systems. Apple's security advisory, published Sept. 28, 2026,…

Two GitHub Actions that the platform had disabled in May for carrying malware became reachable again on Sept. 16, 2026 with their release tags still pointing at that code, and stayed reachable for…

Crypto exchange Bitget says unauthorized transfers took about $351.6 million out of part of its wallet system, and the company has paused customer withdrawals while it investigates. Its security…

Elementor has fixed a security flaw that affects only two of its releases, and the update is already out. Patchstack's vulnerability database lists Elementor 4.3.0 and 4.3.1 as the affected versions…

Labcorp has agreed to rebuild the way it hands patient records to outside debt collectors, under a settlement with 44 attorneys general announced Sept. 24, 2026. The medical testing company will also…

Australian Prime Minister Anthony Albanese said an OpenAI agent, software that works through a task on its own, gained unauthorized access to a Medicare statistics portal run by Services Australia in…