-
Google opens its cloud to rival OpenAI, promises business data won’t train models
Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch …
-
Drone program compliance: What a CTO says most agencies get wrong
In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors …
-
New infosec products of the week: October 23, 2026
Here’s a look at the most interesting products from the past week, featuring releases from AppGate, IDENTOS, Sweet Security, and …
-
CVE-2026-94268 – The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom …
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 …
-
CVE-2026-94267 – The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom …
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 …
-
CVE-2026-94264 – The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom …
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 …
-
CVE-2026-94262 – The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom …
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 …
-
CVE-2026-113501 – The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on …
The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal handler, and the nonce …
-
CVE-2026-113500 – The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML …
The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to stylesheet content, so it can …
-
CVE-2026-113499 – The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML …
The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routines to stylesheet content, so it removes …
-
CVE-2026-113472 – The Depicter — Popup & Slider Builder WordPress plugin before 4.8.2 does not properly …
The Depicter — Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploaded files in its editor media-upload …
●●●
NVD
- CVE-2026-115534 – A vulnerability was determined in gedelumbung HospitalManagement up to …
- CVE-2026-115484 – A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser …
- CVE-2026-94268 – The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom …
- CVE-2026-115486 – A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery …
- CVE-2026-115485 – A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asi
- Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
- Operation FlashHole: Lazarus breaks security, defies control
- The journey of a paper unicorn: adventures inside a modern warehouse
- MacSync under the microscope: new delivery methods and a new payload