Summary: Threat actors are exploiting a critical remote code execution (RCE) flaw in the Collabora Online app for Nextcloud. This vulnerability, tracked as CVE-2026-110447, is being used to backdoor Nextcloud servers. A …
Summary: A critical heap buffer overflow vulnerability (CVE-2026-39919) has been found in the Ghostscript interpreter. This flaw allows remote code execution through specially crafted PDF files. Ghostscript is a widely …
Summary: Microsoft’s October 2026 Patch Tuesday updates addressed a record-breaking 1,411 security flaws. These updates include one actively exploited and two publicly disclosed zero-day vulnerabilities. Microsoft’s …
Summary: Microsoft released patches for a record 1,413 vulnerabilities during Patch Tuesday. Among these patches is a Windows Shell bug that has been actively exploited. Microsoft broke its own record by releasing …
Summary: Next.js released an out-of-band security update on October 14, fixing two critical unauthenticated remote code execution (RCE) flaws. Additionally, a high-severity denial-of-service (DoS) vulnerability was also …
Summary: NGINX released versions 1.30.6 and 1.31.7 on October 14, fixing five vulnerabilities. One of these flaws had been present in every release since May 2005. NGINX, a widely used web server and reverse proxy, has …
Summary: This week, various security threats emerged, including Adobe RCE vulnerabilities, DNS-based wallet theft, and NVIDIA container escape. A data theft tool with a victim-scaring feature also stands out among this …