AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
October 16, 2026
AWS patched CVE-2026-110812, a CVSS 9.9 unsafe deserialization flaw in Apache TinkerPop Gremlin that affects Amazon Neptune engine versions 1.2.0.0
Security Spotlight
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
AWS patched CVE-2026-110812, a CVSS 9.9 unsafe deserialization flaw in Apache TinkerPop Gremlin that affects Amazon Neptune engine versions 1.2.0.0 and later.
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such zero-day since September.
Meta Notifies 1,500 After Stolen Credentials Expose GitHub Code
Meta is notifying about 1,500 people after hackers used an employee's stolen credentials to take product code and a small amount of personal data from ...
Docker Fixes Critical Docker Hub Flaw GhostPat, CVE-2026-105445
Docker patched GhostPat, a critical Docker Hub flaw (CVE-2026-105445, CVSS 9.4) that let attackers act as other accounts at the registry level for two years.
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry secrets.
Atlassian CVE-2026-21589 Exploited Within Two Hours of PoC Details
Attackers probed Atlassian Data Center flaw CVE-2026-21589 within two hours of watchTowr publishing details; Previdian logged 15 attempts from three IPs.
Dell Patches Root-Level Flaw CVE-2026-86360 in System Update Tool
Dell fixed a critical path traversal, CVE-2026-86360, in its System Update CLI that lets unauthenticated remote attackers run code as root, plus four more bugs.
Android October 2026 Update Patches 25 Flaws, Seven Rated Critical
Google's Android security bulletin for patch level 2026-10-01 fixes 25 vulnerabilities, seven of them critical, with no in-the-wild exploitation reported.
Senate Passes Health Care Cybersecurity and Resilience Act
The US Senate passed the bipartisan Health Care Cybersecurity and Resilience Act by unanimous consent, sending grants and coordination measures to the House.
South Korea’s President Orders Probe Into Bank Data Breaches
President Lee Jae Myung ordered an investigation after breaches at Shinhan, KB Kookmin, Hana, Woori, and Yegaram Savings Bank exposed over 60,000 records.
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
October 15, 2026
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such
Meta Notifies 1,500 After Stolen Credentials Expose GitHub Code
October 14, 2026
Meta is notifying about 1,500 people after hackers used an employee’s stolen credentials to take product code and a small
Docker Fixes Critical Docker Hub Flaw GhostPat, CVE-2026-105445
October 14, 2026
Docker patched GhostPat, a critical Docker Hub flaw (CVE-2026-105445, CVSS 9.4) that let attackers act as other accounts at the
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
October 12, 2026
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry
Atlassian CVE-2026-21589 Exploited Within Two Hours of PoC Details
October 8, 2026
Attackers probed Atlassian Data Center flaw CVE-2026-21589 within two hours of watchTowr publishing details; Previdian logged 15 attempts from three
Dell Patches Root-Level Flaw CVE-2026-86360 in System Update Tool
October 7, 2026
Dell fixed a critical path traversal, CVE-2026-86360, in its System Update CLI that lets unauthenticated remote attackers run code as
Android October 2026 Update Patches 25 Flaws, Seven Rated Critical
October 7, 2026
Google’s Android security bulletin for patch level 2026-10-01 fixes 25 vulnerabilities, seven of them critical, with no in-the-wild exploitation reported.
Senate Passes Health Care Cybersecurity and Resilience Act
October 6, 2026
The US Senate passed the bipartisan Health Care Cybersecurity and Resilience Act by unanimous consent, sending grants and coordination measures
South Korea’s President Orders Probe Into Bank Data Breaches
October 5, 2026
President Lee Jae Myung ordered an investigation after breaches at Shinhan, KB Kookmin, Hana, Woori, and Yegaram Savings Bank exposed
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.