Vulnerabilities & Patching

4+ day, 3+ hour ago   (537+ words) Microsoft has released an out-of-band security update addressing CVE-2026-96940, a high-severity vulnerability in Microsoft Exchange Server that could allow authenticated attackers to access other users’ mailboxes and read sensitive emails and attachments. The flaw carries a CVSS score of 8.8 and…...

2+ day, 7+ hour ago   (359+ words) wolfSSL has released wolfSSH 1.6.0 to fix five security flaws, including a critical host key verification bypass that could let an attacker impersonate an SSH server. Published on October 6, 2026, the update addresses Windows privilege escalation, unauthenticated key exchange abuse, unauthorized forwarding…...

3+ day, 12+ hour ago   (139+ words) Fortinet released fixes for an exploited FortiMail flaw; administrators should upgrade affected branches and check appliances for signs of compromise. The weakness was already being exploited when Fortinet disclosed it. The Canadian Centre says Fortinet reported exploitation in the wild,…...

5+ day, 1+ hour ago   (672+ words) Online privacy is becoming increasingly important, especially for Linux users who want more control over how their internet traffic is handled. Parrot OS has long included tools aimed at security researchers and privacy-conscious users, and one of its best-known privacy…...

5+ day, 7+ hour ago   (248+ words) Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and attachments of other users in the same organization, but “does not allow access across…...

6+ day, 7+ hour ago   (549+ words) Fortinet's FortiMail customers have an unusual security problem this week: a critical vulnerability is already being exploited, but there is still no fixed build to install across the affected release branches. "A path traversal vulnerability in FortiMail could allow an…...

1+ week, 1+ day ago   (319+ words) Zano has published a post-mortem detailing how an attacker exploited a “Gateway Address” vulnerability over the past month—producing tens of millions of...

1+ week, 1+ day ago   (429+ words) Cops May Have Found a Way Around One of Apple’s Toughest iPhone Security Features AOL.com The latest round of the ongoing cat-and-mouse game between Apple and the cops has seemingly gone to the cat. According to a report from…...

1+ week, 1+ day ago   (540+ words) As reported by 404 Media, Magnet Forensics says it has found a way to bypass the iPhone security feature that automatically reboots devices if they haven’t been unlocked for 72 hours. Here are the details. Nearly two years ago, the iOS 18.1 update…...

1+ week, 1+ day ago   (769+ words) Magnet Forensics video claims GrayKey Preserve keeps seized iPhones in an accessible state even after iOS 18.1 reboots Apple built the 72-hour inactivity reboot into iOS 18.1 to push unattended iPhones into a harder-to-crack security state. A leaked training video obtained by…...