Dutch Police Arrest 2 Over AI-Voiced Bank Fraud Using NFC App
October 27, 2026
Rotterdam police arrested two men over AI-voiced fake bank calls and an NFC card-scanning app that took about EUR 380,000
News
Dutch Police Arrest 2 Over AI-Voiced Bank Fraud Using NFC App
Rotterdam police arrested two men over AI-voiced fake bank calls and an NFC card-scanning app that took about EUR 380,000 from 170 Dutch victims in ...
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
A researcher published a PoC for macOS autofs flaws CVE-2026-84568 (root) and CVE-2026-84570 (Gatekeeper bypass), which Apple already patched in September.
Capcom ID Breach Exposes 11.77 Million Email Addresses
Capcom confirmed attackers accessed its CAPCOM ID login service, exposing 11,774,247 email addresses and login metadata, and locked out 196 account holders.
Quest Diagnostics Reports Breach of Quanum Lab Services Manager
Quest Diagnostics told regulators an intruder accessed its Quanum Lab Services Manager platform and may have reached certain patient records; scope is unknown.
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
GitLab fixed CVE-2026-110264, a CVSS 10.0 regex flaw in Onigmo that can let unauthenticated users run code on self-managed servers back to version 7.0.
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
Arista fixed CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator that it says is exploited, letting low-privilege users gain operator access.
eMudhra Exits TLS Business as Chrome and Oracle Distrust Its Keys
eMudhra will leave the global TLS certificate business, Chrome will distrust its ECC G3 root on October 27, and Oracle issued a Java alert for ...
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin Console.
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
Trend Micro's ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel mailing lists, with no mainline fix available and no CVE IDs ...
CISA Warns of Nine Kiloview E3 Encoder Flaws, Two at CVSS 9.9
CISA advisory ICSA-26-295-01 covers nine Kiloview E3 NDI encoder flaws, including two CVSS 9.9 command injections that give root; firmware V1.30 fixes them.
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
October 27, 2026
A researcher published a PoC for macOS autofs flaws CVE-2026-84568 (root) and CVE-2026-84570 (Gatekeeper bypass), which Apple already patched in
Capcom ID Breach Exposes 11.77 Million Email Addresses
October 23, 2026
Capcom confirmed attackers accessed its CAPCOM ID login service, exposing 11,774,247 email addresses and login metadata, and locked out 196
Quest Diagnostics Reports Breach of Quanum Lab Services Manager
October 23, 2026
Quest Diagnostics told regulators an intruder accessed its Quanum Lab Services Manager platform and may have reached certain patient records;
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
October 23, 2026
GitLab fixed CVE-2026-110264, a CVSS 10.0 regex flaw in Onigmo that can let unauthenticated users run code on self-managed servers
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
October 23, 2026
Arista fixed CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator that it says is exploited, letting low-privilege users gain
eMudhra Exits TLS Business as Chrome and Oracle Distrust Its Keys
October 23, 2026
eMudhra will leave the global TLS certificate business, Chrome will distrust its ECC G3 root on October 27, and Oracle
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
October 23, 2026
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
October 23, 2026
Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel mailing lists, with no mainline fix
CISA Warns of Nine Kiloview E3 Encoder Flaws, Two at CVSS 9.9
October 23, 2026
CISA advisory ICSA-26-295-01 covers nine Kiloview E3 NDI encoder flaws, including two CVSS 9.9 command injections that give root; firmware
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.