Microsoft issued its largest ever round of security updates in the October Patch Tuesday
Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication
Attackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then…
OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings
A recording device wrapped in toilet paper and plugged into the back of a television in an executive conference room at OpenAI’s San Francisco office has…
Zoom Certificate Validation Vulnerability Allows Attackers to Access Sensitive Information
Zoom has disclosed a high-severity vulnerability in the My Notes feature that affects multiple Zoom Workplace clients. This issue, tracked as…
IT Security News Hourly Summary 2026-10-14 11h : 11 posts
11 posts published in the last hour 08:31Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update 08:31Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images 08:02Meta Removes 3.7 Million Scam Accounts as 28 Arrested in…
Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update
Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly…
Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images
Docker disclosed a critical vulnerability in Docker Hub that let attackers impersonate other users at the container registry level. This flaw, tracked as…
Meta Removes 3.7 Million Scam Accounts as 28 Arrested in Global Crackdown
Meta removed more than 3.7 million Facebook and Instagram accounts, Pages, and Groups during an international crackdown on West African scam networks that…
Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched
New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disruption
Crunchbase – 559,908 breached accounts
In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters “pay or leak” extortion attempt . Data allegedly…
Hackers Abuse Google Search to Attacks ITadmins with Weaponized PuTTY Installer
IT administrators searching Google for PuTTY may see a convincing fake download result mixed with legitimate links. Researchers documented a campaign that…
Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)
In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability…
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.
Windows BitLocker Vulnerabilities Security Feature Bypass and Privilege Elevation Attacks
Microsoft fixed three Windows BitLocker vulnerabilities CVE-2026-85920, CVE-2026-88070, and CVE-2026-83500 that could enable privilege escalation or…
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
IT Security News Hourly Summary 2026-10-14 10h : 4 posts
4 posts published in the last hour 07:31Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day 07:31Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats 07:01Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th) 07:00IT Security News Hourly Summary…
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.
Webcams go to war, Kimsuky sends invites, Anthropic blocks copycats
Webcams get drafted into war https://www.wsj.com/tech/cybersecurity/video-cameras-webcams-hacked-war-b00b8a24?st=RRCsaw Kimsuky’s invitations come with…
Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
IT Security News Hourly Summary 2026-10-14 09h : 11 posts
11 posts published in the last hour 06:31Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections 06:31SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities 06:31How a leaked builder of XWorm turned a remote access trojan into a surveillance kit…
Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections
Microsoft has addressed a vulnerability in Windows Shell that attackers are actively exploiting, allowing them to bypass the Mark of the Web (MOTW)…
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.
How a leaked builder of XWorm turned a remote access trojan into a surveillance kit
Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold.…
Italy Probes Microsoft Video Game Makers Over Transparency
Italy probes Microsoft-owned units as part of broader EU action targeting tricky pricing for in-game currencies and items