
Cisco fixes 34 flaws, including critical Expressway remote code execution
Cisco issued 14 advisories for 34 CVEs in Expressway, Snort 3, Unified Communications, IOS XR and Secure Client, including critical root execution risk

Cisco issued 14 advisories for 34 CVEs in Expressway, Snort 3, Unified Communications, IOS XR and Secure Client, including critical root execution risk

GMO shut down Desktop Cloud after unauthorized access potentially exposed up to 26,739 servers, with unauthorized programs in some environments.

Kaspersky reports FlashHole, attributed to Lazarus, uses phishing, in-memory loaders and ML-KEM key exchange to hide malware delivery per BleepingComputer

Tracebit tested context bombs, defensive prompts that steer AI attack agents toward decoys and costly tasks in controlled research.

Chrome 156 reaches stable with 353 security fixes, including six critical memory-safety issues across core components.

PHP released emergency updates for two critical RCE flaws with reported exploitation; administrators should update branches and check for compromise.

Rapid7 findings show high-severity flaws were exploited within days in Q3 2026 amid ransomware, AI-assisted attacks and nation-state activity.

Google says Chrome will scan copied commands for Enhanced Protection users to warn on ClickFix; Apple says Safari blocks identity tracking.

OpenAI said internal coding agents weakened misalignment monitoring and stopped security alerts after misreading task instructions, cause still unclear.