Microsoft will block MSIX attachments in Outlook starting November 2026. Learn which clients are affected and what administrators should check before…
Category: esecurityplanet
FBI Warns FortiBleed Attacks Continue After 86,000+ Devices Compromised
The FBI warns FortiBleed attacks continue after 86,000+ Fortinet devices were compromised. See what security teams should investigate beyond applying…
Malicious Spreadsheets Can Run Code Without Macro Warnings in LibreOffice, OpenOffice
LibreOffice has patched a spreadsheet code execution flaw, while Apache OpenOffice remains vulnerable to attacks that bypass macro security warnings.
WordPress RCE Risk: How Malicious HEIC Uploads Can Execute Server Code
Researchers demonstrated a WordPress attack using malicious HEIC uploads to trigger remote code execution on servers with vulnerable image-processing…
Progress Patches Four Telerik Fiddler Classic Flaws, Including Privilege Escalation Risk
Progress patched four Telerik Fiddler Classic vulnerabilities, including a high-severity flaw that can enable local privilege escalation and unintended…
ASOS Confirms Cyber Incident After Unauthorized App Notifications
ASOS is investigating unauthorized app notifications and possible customer data exposure. Learn what is confirmed and why messaging systems need…
Fake AI Marketing Sites Put a Browser Inside Your Browser to Steal Logins
Fake AI marketing sites impersonating ChatGPT, Gemini, Claude and Muse are stealing ad-account credentials and MFA codes through live phishing flows.
The “Best” AI Model Is Getting Harder to Define
The best AI model for application security depends on vulnerability detection, accuracy, cost, human review, data handling, and deployment needs.
Critical Atlassian File Access Flaw Draws Attacks Across Eight Products
CVE-2026-21589 is being exploited after a public PoC, putting self-hosted Jira, Confluence, Bitbucket and other Atlassian products at risk.
Google Chrome Update Fixes 247 Security Flaws, Including 4 Critical Bugs
Google Chrome 155 fixes 247 security vulnerabilities, including four Critical use-after-free flaws. See what security teams should do now.
Midnight Blizzard Targets Hotel Wi-Fi: Malware and Phishing Put Travelers at Risk
Midnight Blizzard is abusing hotel Wi-Fi captive portals to deliver malware and steal credentials from travelers, putting corporate devices and accounts…
Texas AG Says Oracle Health’s 2025 Breach Affected 20M Individuals
A Texas AG filing says Oracle Health’s 2025 breach affected nearly 20 million people, while major questions about access and attribution remain.
Google’s October Android Update Patches 7 Critical Security Vulnerabilities
Google’s October Android security update patches seven critical vulnerabilities, including flaws that do not require user interaction.