TeamViewer Flaw CVE-2026-111585 Lets Hosts Hijack Technicians
October 30, 2026
A CVSS 8.8 integer overflow in TeamViewer’s viewer lets a malicious remote host crash or run code on a support
News
TeamViewer Flaw CVE-2026-111585 Lets Hosts Hijack Technicians
A CVSS 8.8 integer overflow in TeamViewer's viewer lets a malicious remote host crash or run code on a support technician's Windows, macOS, Linux or ...
Progress Patches 15 WS_FTP Server Flaws, Including CVSS 10.0 Bug
Progress fixed 15 WS_FTP Server vulnerabilities, led by CVE-2026-84295, a CVSS 10.0 authentication flaw that exposes administrative credentials to attackers.
ServiceNow Patches Critical AI Platform Sandbox Escape Flaw
ServiceNow fixed CVE-2026-103093, a critical Rhino sandbox bypass that lets an authenticated admin run code on the host OS, plus two other flaws in KB3228994.
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a phone when a user answers ...
Researcher Finds 26,400 Live Cloud and AI Keys on Gitee
Researcher Ben Zimmermann scanned 7.25 million public Gitee repositories and found about 26,400 working cloud and AI credentials, led by Alibaba Cloud keys.
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more than 32,000 downloads.
EMBRACE Flaws in Cursor, Codex, VS Code Allow File Theft
Forever Security's EMBRACE research found embedded-browser flaws in Cursor, Copilot, Codex, VS Code and Claude Desktop; Codex and VS Code remain unpatched.
Chrome 156 Update Fixes 21 Flaws, Including Critical MediaStream Bug
Google's Chrome 156 update fixes 21 vulnerabilities, including critical MediaStream memory corruption bug CVE-2026-76024, with no exploitation reported.
GM Pays $220 Million to Settle 36-State Driver Data Suit
General Motors agreed to pay $220 million to 36 state attorneys general over the sale of driver location and driving data to brokers that resold ...
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
Progress Patches 15 WS_FTP Server Flaws, Including CVSS 10.0 Bug
October 30, 2026
Progress fixed 15 WS_FTP Server vulnerabilities, led by CVE-2026-84295, a CVSS 10.0 authentication flaw that exposes administrative credentials to attackers.
ServiceNow Patches Critical AI Platform Sandbox Escape Flaw
October 30, 2026
ServiceNow fixed CVE-2026-103093, a critical Rhino sandbox bypass that lets an authenticated admin run code on the host OS, plus
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
October 30, 2026
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a
Researcher Finds 26,400 Live Cloud and AI Keys on Gitee
October 30, 2026
Researcher Ben Zimmermann scanned 7.25 million public Gitee repositories and found about 26,400 working cloud and AI credentials, led by
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
October 30, 2026
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more
EMBRACE Flaws in Cursor, Codex, VS Code Allow File Theft
October 30, 2026
Forever Security’s EMBRACE research found embedded-browser flaws in Cursor, Copilot, Codex, VS Code and Claude Desktop; Codex and VS Code
Chrome 156 Update Fixes 21 Flaws, Including Critical MediaStream Bug
October 30, 2026
Google’s Chrome 156 update fixes 21 vulnerabilities, including critical MediaStream memory corruption bug CVE-2026-76024, with no exploitation reported.
GM Pays $220 Million to Settle 36-State Driver Data Suit
October 30, 2026
General Motors agreed to pay $220 million to 36 state attorneys general over the sale of driver location and driving
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
October 29, 2026
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.