logo

News related to
patches

Google has issued an emergency security update for its Chrome browser after confirming that attackers are exploiting a high-severity vulnerability affecting the software’s handling of XML data. The update, published on 9 November, fixes nine security flaws in desktop Chrome, including CVE-2026-125350, a use-after-free vulnerability for which Google says an exploit exists in the wild. The company has not identified the attackers, disclosed their targets or described […]

OpenAI has introduced GPT-6 Cyber, a specialised artificial intelligence model capable of discovering software vulnerabilities and developing working exploits, while restricting access to approved cybersecurity researchers and organisations. The company launched the model on Thursday through its Daybreak Red programme, initially making it available to selected customers using its application programming interface and Codex coding platform. OpenAI classified its cybersecurity capabilities as Critical under its Preparedness Framework, […]

OpenAI has disclosed that an automated cybersecurity system generated working exploits for 948 distinct Linux kernel privilege escalation vulnerabilities during a ten-day research campaign, highlighting the growing ability of artificial intelligence to uncover serious software weaknesses at scale. The company said on Wednesday that its experimental pipeline, powered by an unreleased cyber-focused model, reproduced 1,724 vulnerabilities from 2,308 candidate findings during a mid-October exercise. It also produced […]

Cloudflare has introduced Zero Wire, a publicly accessible intelligence service designed to help organisations identify serious internet-facing vulnerabilities, distinguish confirmed exploitation from emerging risks and determine which systems require urgent attention. Launched on 3 November through the security section of Cloudflare Radar, the service consolidates technical research, software vendors’ advisories, exploitation evidence and observations from Cloudflare’s network into regularly reviewed briefings. Access is available to organisations regardless […]

OpenAI has patched a vulnerability in its application programming interface that allowed security researchers to extract protected reasoning traces from an advanced artificial intelligence model, following a disclosure by cybersecurity firm Xint. The researchers said OpenAI fixed the weakness on 23 October and awarded their team a $6,000 bug bounty. Xint published its findings on 26 October, describing a technique called compaction smuggling that circumvented safeguards intended […]

Arabian Post Staff -Dubai Authorities in the United Arab Emirates have closed beaches across three northern emirates following an offshore tanker oil spill, as emergency teams intensify containment operations and assess pollution affecting coastal waters. The Ministry of Climate Change and Environment confirmed that its technical monitoring and environmental assessment system detected oil contamination reaching beaches in Umm Al Quwain. All beaches and coastal areas in the […]

Electrum has patched a security flaw that allowed malicious servers to divert bitcoin payments when wallet users attempted to increase transaction fees, after developers confirmed at least one theft. The developers released version 4.8.3 on 24 October and urged users of earlier versions to upgrade. Their security advisory classified the vulnerability as high severity and said some servers had exploited it against customers. Two users reported suspicious […]

Advertisements

Cybersecurity researchers have uncovered a campaign targeting diplomatic organisations in three Central Asian countries with BlackX, a bootkit capable of circumventing Windows Secure Boot protections even on updated computers. Kaspersky disclosed the operation on Thursday, identifying diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan as targets. Its Global Research and Analysis Team linked the activity to APT41, a hacking group associated with China, but assigned only medium confidence […]

Japanese banks, airlines and transport operators suspended digital services as companies rushed to install emergency security patches for critical vulnerabilities in PHP, a programming language widely used across the internet. The disruptions spread across Japan on Wednesday and Thursday, affecting online banking, airline applications, airport information systems and commercial websites. Companies temporarily disabled vulnerable services while assessing their exposure to two security flaws that could allow attackers […]

Government websites across Europe were temporarily shut down on Wednesday as authorities rushed to contain two critical vulnerabilities in PHP, the programming language supporting a substantial share of the world’s websites. The emergency prompted precautionary outages affecting public services in the Netherlands, Finland, France and Germany, while PHP developers released security updates and urged operators to install them immediately. Cybersecurity authorities warned that vulnerable servers could allow […]

US cybersecurity authorities have warned that SafePay ransomware operators have compromised at least 600 organisations worldwide, including critical infrastructure providers, and urged businesses to strengthen network defences against further attacks. The Cybersecurity and Infrastructure Security Agency (CISA) issued the joint advisory on Tuesday alongside the Federal Bureau of Investigation, US Secret Service and law enforcement partners in Britain and Germany. It describes SafePay as one of the […]

PHP developers have released emergency security updates addressing two critical vulnerabilities after details of the flaws surfaced online ahead of their planned disclosure, prompting cybersecurity authorities worldwide to warn organisations about the risk of unauthorised access to vulnerable web servers. The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, could allow attackers to execute malicious code remotely without authentication. The PHP security team released patches on Wednesday, October 21, […]

Companies generating at least $1 billion annually are more than twice as likely as smaller businesses to knowingly leave serious software vulnerabilities unpatched, a global cybersecurity survey released on Wednesday found. Research commissioned by software security company Chainguard showed that 66% of security leaders at businesses with revenue of $1 billion or more acknowledged leaving high or critical vulnerabilities unresolved at least sometimes. The corresponding figure was […]

A high-severity vulnerability in React Server Components can allow unauthenticated attackers to overwhelm vulnerable Next. js servers through specially crafted HTTP requests, potentially making affected applications unavailable. The flaw, identified as CVE-2026-23870 and tracked under security advisory GHSA-rv78-f8rc-xrxh, affects specific releases of React 19. Security maintainers have issued patches and urged developers operating affected server-side applications to upgrade immediately. The vulnerability carries a severity score of 7.5 […]

Red Hat and IBM have identified and remediated more than 400 previously unknown vulnerabilities in widely used Java libraries through their Lightwell open-source security initiative, while making its enterprise Clearinghouse service generally available. The companies said on Tuesday that Lightwell engineers had also backported fixes for the flaws into versions of software already deployed in production, seeking to close security gaps without forcing organisations into disruptive upgrades. […]

Amazon Web Services has patched two high-severity vulnerabilities in the Python software development kit for Amazon Bedrock AgentCore that could allow attackers to execute arbitrary commands inside Code Interpreter sandboxes and obtain temporary AWS credentials attached to customer execution roles. The flaws, tracked as CVE-2026-12530 and CVE-2026-16796, affected the SDK’s install_packages() helper, which enables AI agents to install Python libraries inside managed Code Interpreter sessions. AWS has […]

Maintainers of the Model Context Protocol Python SDK have patched a high-severity OAuth weakness that could let a malicious MCP server steal authentication credentials and potentially take over accounts. The flaw affects the official Python implementation of MCP, an open protocol originally introduced by Anthropic to connect artificial-intelligence applications with external tools and data. The security advisory rates the vulnerability 7.5 out of 10 for unattended authentication […]

Cybersecurity researchers have identified a previously undocumented Windows remote access trojan that can continuously stream an infected computer’s display to its operators while supporting command execution, downloads, clipboard monitoring and other remote-control functions. Point Wild’s Lat61 Threat Intelligence team named the malware BotHelper RAT after the Bot. Helper namespace found in its. NET assembly. Its analysis, published on September 24, traced a multi-stage infection chain beginning with […]

Salesforce has patched three vulnerabilities in its Agentforce artificial intelligence platform that researchers said could have enabled unauthenticated attackers to extract sensitive customer relationship management data without victims clicking malicious links. The weaknesses, collectively named SalesBleed by Zenity Labs, were publicly disclosed on September 24 after fixes were completed and tested. Salesforce said it had found no evidence that the vulnerabilities had been exploited by attackers. The […]

A Linux kernel vulnerability present since 2011 can allow an unprivileged local attacker to gain root privileges and escape a Docker container, according to new technical research detailing an exploit for the flaw. Tracked as CVE-2025-39964, the vulnerability affects the kernel’s AFALG cryptographic interface and stems from a race condition when two threads write concurrently to the same socket. Linux kernel maintainers fixed the issue in 2025 […]

Microsoft has released an out-of-band Windows update to correct several faults introduced by its September security patches, including Remote Desktop instability, Hyper-V Linux file-sharing failures and problems affecting some USB audio devices. The emergency servicing release, issued on September 14, applies across multiple supported Windows editions, with separate packages for Windows 11, Windows 10 and Windows Server versions. Microsoft said the updates address problems traced to security […]

GitLab has issued emergency security updates for self-managed installations after fixing two critical vulnerabilities, including a maximum-severity flaw now listed by US authorities as actively exploited. The company released GitLab Community Edition and Enterprise Edition versions 19.3.2, 19.2.6 and 19.1.8 on September 10, urging administrators running affected versions to upgrade immediately. GitLab. com is already operating the patched release, while GitLab Dedicated customers do not need to […]

OpenAI has committed $1 billion to subsidise access to its Daybreak cybersecurity programme, targeting essential-service operators and other under-resourced defenders as artificial intelligence rapidly reshapes both cyber attacks and cyber defence. The company said the funding will support subsidised access to Daybreak models and products, training, technical assistance and partnerships, with the initial focus on the United States. OpenAI said it expects the commitment to be consumed […]

Canonical has issued Ubuntu Server 26.04.1 LTS, the first point release of Resolute Raccoon, folding months of security patches, high-severity bug fixes and package updates into refreshed installation images. The August 27 release is designed to cut the volume of updates required after a new deployment while preserving compatibility with Ubuntu 26.04 LTS, which launched on April 23. Canonical said the new media includes security updates issued […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
Lula commits to budget discipline after election victory // Recognition under the U.S. Green Building Council’s rating system confirms the 22-residence tower is on track for full certification on completion // Bank of England flags sharper AI share correction risks // Setback for Usha in Olympic body // Google patches actively exploited Chrome XML security flaw // UAE non-oil trade climbs to AED 2.945 trillion // PhotonPay Strengthens North American Regulatory Footprint with Canada’s RPAA Registration // FATF unveils measures to dismantle global scam networks // Abu Dhabi property transaction value climbs 76.1 percent // From Seoul to Wuzhen: Korean Celebrities and Creators Spark a Water Town Slow-Living Trend // Sber announces results of GigaArt AI-art festival: Nearly half a million images // Nexawork AI Launches Custom Software for SMEs From RM19,900.00 // Public Protests Challenge Elected Power In Europe And India // Abu Dhabi court holds NMC executives liable for fraud // Trump directs Justice Department scrutiny of Democratic threats // Vasavan alleges one-man show by CM Satheesan // Republicans Struggling To Come Out Of Nov 3 Debacle To Prepare For 2028 Prez Polls // NIA Highlights Three Exemplary Breakthroughs from National Innovation Awards, Driving Thailand Toward a Global ‘Innovation Nation’ // Trump’s Defeat In Midterm May Lead To Both Challenges And Opportunities For Indian Economy // AI stock rout erodes sovereign and pension holdings //