News related to
patches

Tech coalition sounds alarm over AI cyber threats

More than 100 technology, financial and security organisations have warned that the world has only months to strengthen digital defences before increasingly capable artificial intelligence systems make sophisticated cyberattacks cheaper, faster and far easier to scale. OpenAI, Anthropic, Google, Microsoft, Amazon Web Services, Oracle and IBM are among the companies backing a global call for governments and businesses to treat cyber defence as an immediate priority. The […]

Cisco patches BroadWorks flaw exposing sensitive files

Cisco has released security updates for a high-severity BroadWorks vulnerability that could allow unauthenticated remote attackers to read sensitive configuration files from affected systems. The flaw, tracked as CVE-2026-20320, affects the Open Client Interface XML parser used by Cisco BroadWorks, a communications platform widely deployed by service providers for cloud calling and unified communications. It carries a CVSS severity score of 7.5 out of 10 and has […]

Medusa ransomware breaches more than 500 organisations

Medusa ransomware operators have compromised more than 500 organisations across critical infrastructure sectors, prompting US cyber authorities to warn that the group is exploiting vulnerabilities faster and using increasingly aggressive methods to penetrate networks and extort victims. An updated joint cybersecurity advisory from the Federal Bureau of Investigation, Cybersecurity and Infrastructure Security Agency and Department of Health and Human Services said the tally had exceeded 500 by […]

GitHub Actions reliability falls below enterprise benchmark

GitHub Actions has slipped well below the 99.9% availability level widely associated with enterprise-grade cloud services, sharpening concerns over the resilience of a platform that has become central to software development and deployment worldwide. The continuous integration and delivery service recorded 99.33% uptime over the 90 days to August 19, equivalent to roughly 14.5 hours of unavailable time. By comparison, GitHub’s core Git Operations service, covering fundamental […]

Lazarus exploits Windows zero-day in defence attacks

North Korea-linked hackers exploited a previously unknown Windows vulnerability to gain the highest level of system privileges while targeting defence, aerospace and aviation organisations across several countries. The flaw, tracked as CVE-2026-68820, affects the Windows Ancillary Function Driver for WinSock, known as AFD. sys. Microsoft patched the vulnerability on August 11 after it was found being actively exploited as part of the long-running Operation Dream Job cyber-espionage […]

Chrome 151 closes 370 browser security flaws

Google has released Chrome 151 with fixes for 370 security vulnerabilities, including seven critical flaws capable of exposing users and organisations to serious attacks. The update began rolling out on July 29 for Windows, macOS and Linux. Chrome 151.0.7922.71 and 151.0.7922.72 are being distributed to Windows and Mac devices, while Linux systems are receiving version 151.0.7922.71. The Android release, carrying the same core security fixes, is being […]

AI-assisted hunt exposes Linux kernel privilege flaw

A Linux kernel vulnerability capable of giving a local attacker root access has been publicly detailed after artificial intelligence helped a security researcher identify and weaponise a race condition in the operating system’s network traffic-control subsystem. The flaw, tracked as CVE-2026-53264, affects the kernel’s net/sched component and carries a severity score of 7.8. It is a use-after-free vulnerability that can allow an ordinary user with access to […]

FFmpeg flaws expose media pipelines to memory attacks

Multiple high-severity vulnerabilities in FFmpeg have exposed media-processing systems to memory corruption, information leakage and service disruption when they handle malicious video, audio, image or subtitle files. The newly catalogued flaws affect FFmpeg 8.1.2 and, depending on the vulnerability, several older branches. They are especially significant for cloud transcoding services, streaming platforms, social networks, content-management systems and artificial intelligence applications that automatically process files supplied by users. […]

Public exploit raises risk for unpatched vBulletin forums

A critical vBulletin vulnerability has exposed unpatched forum servers to remote takeover through malicious requests that require no login credentials or user interaction. Tracked as CVE-2026-61511, the flaw allows an unauthenticated attacker to inject code into vBulletin’s template-processing system and execute arbitrary PHP commands on the underlying server. Successful exploitation could enable intruders to steal data, modify forum content, install malware, create backdoors or use the compromised […]

Usbliter8 project brings iOS 27 jailbreak closer

A developer project has demonstrated an experimental jailbreak process for iOS 27 on Apple’s iPhone 11 Pro, using the hardware-level usbliter8 exploit and a heavily modified firmware restoration workflow. The open-source project, known as usbliter8-fun, is designed solely for security researchers and experienced developers. Its creator warns that the procedure erases the device, disables several core functions and can leave the handset unsuitable for ordinary use. The […]

Bazzite broadens Linux gaming across devices

Bazzite is emerging as a flexible gaming operating system that seeks to bring a console-style experience to desktop computers, handhelds, tablets and home theatre systems without stripping away the functions of a conventional PC. Built on Fedora Atomic Desktops, the open-source platform arrives with Steam installed and includes gaming-focused drivers, software and system adjustments. Its developers aim to reduce the configuration work traditionally associated with Linux gaming […]

WordPress patches critical flaw enabling site takeover

WordPress has issued emergency security updates to block a critical vulnerability that allowed unauthenticated attackers to execute code on websites running standard installations without plugins. The flaw, dubbed “wp2shell” and tracked as CVE-2026-63030, affected WordPress 6.9.0 through 6.9.4 and versions 7.0.0 and 7.0.1. WordPress released versions 6.9.5 and 7.0.2 on July 17, urging administrators to install the patches immediately. The vulnerability carried exceptional risk because an attacker […]

Copilot workflow bypass exposes critical safety gap

GitHub Copilot generated harmful material in every test conducted through a carefully constructed coding workflow, exposing a sharp divide between safeguards in conversational chat and the behaviour of artificial intelligence agents operating across multiple development steps. Researchers Abhishek Kumar and Carsten Maple at the Alan Turing Institute in London tested Copilot inside Visual Studio Code using 204 harmful prompts drawn from three established safety benchmarks. The study […]

OpenAI limits Sol launch amid cyber risks

OpenAI has begun a tightly controlled preview of GPT-5.6 Sol, a new flagship artificial intelligence model with stronger cybersecurity, coding and scientific capabilities, restricting access to vetted partners while it works with US authorities on safeguards for frontier systems. The rollout covers three models under the GPT-5.6 family: Sol, the most advanced tier; Terra, a lower-cost model designed for everyday work; and Luna, a faster and cheaper […]

OpenAI widens Daybreak for software defence

OpenAI has expanded its Daybreak cybersecurity programme with Patch the Planet, a new initiative aimed at helping open-source maintainers find, validate and fix software flaws before attackers can exploit them. The project, built with security research firm Trail of Bits and supported by HackerOne, Calif, researchers and maintainers, shifts the focus from simply discovering vulnerabilities to landing tested patches in widely used software. It comes as artificial […]

Three Years After Founding, INDIA Bloc Is Facing Uncertainty On Its Future

Legacy routers fuel AryStinger scanning network

A new botnet campaign has compromised more than 4,300 ageing routers, turning mainly unsupported D-Link devices into a distributed network for scanning, proxying and preparing future cyber intrusions. The malware, named AryStinger by threat researchers, has been observed targeting routers built around RTL819X-series chipsets, a generation widely used in consumer and small-office networking equipment from roughly 2012 to 2015. The affected devices are led by D-Link DIR-850L […]

AryStinger turns old routers into stealth proxies

AryStinger, a newly analysed botnet family, has compromised more than 4,000 outdated routers and begun turning ageing network devices into covert infrastructure for reconnaissance, intranet scanning and traffic tunnelling. The campaign highlights a shift in botnet use from crude denial-of-service activity towards stealthier pre-intrusion work, where hijacked routers and network-attached storage appliances act as relay points between attackers and intended targets. Security analysts say the malware helps […]

Apple closes Beats microphone security gap

Apple has issued a firmware update for Beats Studio Buds after confirming a Bluetooth security flaw that could allow an attacker nearby to listen through the earbuds’ microphone while the device was unpaired and searching for pairing requests. The fix, released as Beats Firmware Update 1B211 on June 16, addresses CVE-2025-20701, a high-severity vulnerability tied to Bluetooth audio code used in the earbuds. The flaw affected Beats […]

Athena targets AI-led open source exploits

Chainguard has launched Athena, a coalition backed by major financial, technology and security groups to repair open-source software flaws before attackers can use artificial intelligence to find and weaponise them. The initiative brings together BNY, Cisco, Cloudflare, Corridor, DepthFirst, Docker, JPMorganChase, Kyndryl, LTM and PwC, with Chainguard acting as the coordinating platform. Athena is already operational with more than two dozen participating organisations, having processed over 20,000 […]

Defender flaw exposes Windows systems to takeover

A newly disclosed Microsoft Defender exploit has raised fresh concern among security teams after researchers said it could allow a local attacker to gain SYSTEM-level privileges on fully patched Windows machines. The vulnerability, named RoguePlanet by its publisher, was released with proof-of-concept code under the alias MSNightmare, adding to a turbulent sequence of Windows and Defender disclosures that have tested Microsoft’s patching process and the wider debate […]

Claude action flaw exposes pipeline secrets

Microsoft has warned that Anthropic’s Claude Code GitHub Action could expose CI/CD workflow secrets when AI agents process untrusted GitHub content, raising fresh concerns over how autonomous coding tools operate inside software delivery pipelines. The issue centres on the way Claude Code Action handled file-reading capabilities inside GitHub Actions runners. While subprocess paths such as Bash were subject to environment scrubbing and sandboxing controls, the agent’s Read […]

Edge flaws put browser security in focus

Microsoft Edge users have been urged to update their browsers after three security flaws tied to the Pwn2Own hacking contest were publicly detailed, including one vulnerability that could allow remote attackers to execute arbitrary code if a target opens a malicious page or file. The vulnerabilities, tracked as CVE-2026-45492, CVE-2026-45494 and CVE-2026-45495, affect Chromium-based Microsoft Edge and were credited to Orange Tsai of DEVCORE Research Team, one […]

Palo Alto VPN flaw draws urgent patches

Palo Alto Networks customers are facing renewed pressure to patch internet-facing security systems after attackers began exploiting a high-severity authentication bypass flaw in PAN-OS GlobalProtect, a product widely used to provide remote access to corporate networks. The vulnerability, tracked as CVE-2026-0257, affects GlobalProtect portal and gateway deployments in PAN-OS where authentication override cookies are enabled alongside a specific certificate configuration. Successful exploitation can allow a remote attacker […]