Vghost Linux Kernel Flaw CVE-2026-74580 Gets Public Exploit
October 14, 2026
A public exploit for Vghost, Linux kernel flaw CVE-2026-74580 in the vhost subsystem, gives local root and a VM escape
News
Vghost Linux Kernel Flaw CVE-2026-74580 Gets Public Exploit
A public exploit for Vghost, Linux kernel flaw CVE-2026-74580 in the vhost subsystem, gives local root and a VM escape path across nine years of ...
SlugFest Flaw Left 1,500+ npm Packages Open to Hijacking
Bloom Security's SlugFest finding showed npm trusted publishing could let attackers hijack 1,500+ packages after repo renames; GitHub now tightens its rules.
Fortinet, Citrix, Ivanti Patch 29 Flaws, Including Critical FortiSIEM
Fortinet, Citrix and Ivanti released patches for 29 vulnerabilities, including critical bugs in FortiSIEM, FortiSandbox and Ivanti Neurons Patch for Intune.
Hackers Hijack Danfoss Fridge Controllers at French Supermarkets
Attackers took over Danfoss refrigeration controllers overnight, forcing fridges to heat up and spoiling stock at hundreds of French supermarkets nationwide.
Ahold Delhaize Pulls Systems Offline After Security Incident
Ahold Delhaize took systems offline after a network security issue disrupted Albert Heijn online services and staff tools at Stop & Shop and Food Lion.
SAP Patch Day Fixes 20 Flaws, Including CVSS 10.0 Cloud SDK Bug
SAP's October patch day fixes 20 vulnerabilities, four critical, led by a CVSS 10.0 SSRF flaw in SAP Cloud SDK for Python that exposes OAuth2 ...
IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo
IBM issued three critical bulletins rated CVSS 9.8 to 9.9 for IBM i, Db2 Mirror for i and Maximo AI Service, with no workarounds and ...
Progress Fixes 31 MarkLogic Server Flaws, Three Rated CVSS 9.9
Progress Software's October bulletin fixes 31 MarkLogic Server flaws, including three rated CVSS 9.9 that allow code execution and hidden admin accounts.
CERT/CC Warns of 11 Unpatched Thelia E-Commerce Vulnerabilities
CERT/CC says 11 unpatched Thelia flaws, seven enabling remote code execution by back-office users, remain open because the vendor could not be reached.
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
Norway's data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users' sensitive data.
SlugFest Flaw Left 1,500+ npm Packages Open to Hijacking
October 14, 2026
Bloom Security’s SlugFest finding showed npm trusted publishing could let attackers hijack 1,500+ packages after repo renames; GitHub now tightens
Fortinet, Citrix, Ivanti Patch 29 Flaws, Including Critical FortiSIEM
October 14, 2026
Fortinet, Citrix and Ivanti released patches for 29 vulnerabilities, including critical bugs in FortiSIEM, FortiSandbox and Ivanti Neurons Patch for
Hackers Hijack Danfoss Fridge Controllers at French Supermarkets
October 13, 2026
Attackers took over Danfoss refrigeration controllers overnight, forcing fridges to heat up and spoiling stock at hundreds of French supermarkets
Ahold Delhaize Pulls Systems Offline After Security Incident
October 13, 2026
Ahold Delhaize took systems offline after a network security issue disrupted Albert Heijn online services and staff tools at Stop
SAP Patch Day Fixes 20 Flaws, Including CVSS 10.0 Cloud SDK Bug
October 13, 2026
SAP’s October patch day fixes 20 vulnerabilities, four critical, led by a CVSS 10.0 SSRF flaw in SAP Cloud SDK
IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo
October 13, 2026
IBM issued three critical bulletins rated CVSS 9.8 to 9.9 for IBM i, Db2 Mirror for i and Maximo AI
Progress Fixes 31 MarkLogic Server Flaws, Three Rated CVSS 9.9
October 13, 2026
Progress Software’s October bulletin fixes 31 MarkLogic Server flaws, including three rated CVSS 9.9 that allow code execution and hidden
CERT/CC Warns of 11 Unpatched Thelia E-Commerce Vulnerabilities
October 13, 2026
CERT/CC says 11 unpatched Thelia flaws, seven enabling remote code execution by back-office users, remain open because the vendor could
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
October 13, 2026
Norway’s data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users’
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.