Drupal has fixed two critical vulnerabilities that could allow attackers to remotely execute code on websites running a supported version of the content management system. The security issues affect the Field UI module of the software kernel and the contributed Entity List module. Drupal issued a warning earlier this week, urging administrators to apply updates … Read more
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited to attack firewalls. The vulnerability affects the PAN-OS management interface and allows authenticated attackers with network access to execute code as root on vulnerable devices. Palo Alto Networks confirmed in a safety notice announced on … Read more
TrendForce predicts that global notebook shipments could decline by a high single-digit percentage by 2027, depending on how manufacturers respond to rising component costs. Here are the details. ‘Brands (to) face difficult trading’ In a report released this week, TrendForce predicts that global notebook shipments will decline in 2027, with declines ranging from low to … Read more
Atlassian is warning customers about a critical vulnerability known as CVE-2026-21589 that can be exploited for arbitrary file access in several self-hosted data center products, including Confluence, Jira and Bitbucket. The security issue allows an unauthenticated attacker to access certain files in the web root of an affected application. However, exploitation requires knowledge of the … Read more
Fortinet is warning customers about a critical FortiMail vulnerability, CVE-2026-104286, which is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. The vulnerability is classified as critical with a CVSS score of 9.8 and affects the FortiMail administration interface. “A vulnerability related to improper restriction of a pathname to … Read more
Cisco has released security updates to address a critical zero-day in Catalyst SD-WAN Manager (tracked as). CVE-2026-76504), which attackers actively exploit to gain administrator rights. Catalyst SD-WAN Manager, formerly known as SD-WAN vManage, is network management software that allows administrators to monitor and manage up to 6,000 SD-WAN devices from a single dashboard. “In September … Read more
Anthony Albanese says governments must help shape the development of AI, after earlier revealing that an OpenAI agent accessed non-public files on the Australian Medicare data portal. Australian Prime Minister Anthony Albanese has warned artificial intelligence is developing at a “breakneck pace” and called on other countries to shape its development, after an OpenAI agent … Read more
D-Link warned customers about a maximum severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch affecting older DIR-822A dual-band Wi-Fi routers. This vulnerability is due to a stack-based buffer overflow and improper data processing in the DHCP server component and can be exploited without authentication or user interaction. Attackers without valid credentials … Read more
E-commerce platform BigCommerce has alerted several retailers to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores. The cloud-based Software-as-a-Service (SaaS) e-commerce platform confirmed the credentials compromise on September 17 and immediately removed the apps to protect its customers. UK-based online spirits retailer Master … Read more