Cisco ISE Flaw Under Active Exploitation With Maximum Severity Score
Tracked as CVE-2026-76460, the flaw carries a CVSS score of 10.0 and could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to affected systems.
WhatsApp Adds More Languages to Voice Message Transcriptions
WhatsApp is rolling out support for more languages in voice message transcriptions, giving Android users more ways to convert voice messages into text.
Gmail Changes Star and Important Label Colors From Yellow to Blue
Gmail is changing the default colors of its star and “Important” labels from yellow to blue as part of an accessibility update.
X Lets U.S. Users Trade Stocks Directly From Their Timelines
X has launched a new Cashtag feature that lets U.S. users access stock trading through participating brokerages directly from financial conversations on their timelines.
How to Tell If You’ve Been Hit by a Zero-Day Attack Before It’s Too Late
Zero-day attacks can be difficult to detect because they exploit vulnerabilities that vendors may not know about yet. Here are the warning signs to watch for and what to do if you suspect your device or network has been compromised.
EU Proposes Social Media Ban for Children Under 13
The European Union is considering a bloc-wide restriction that would prevent children under 13 from using social media platforms, while introducing additional safeguards for teenagers between 13 and 18.
Google Fixes Actively Exploited Android Zero-Day on Pixel Devices
Google’s September 2026 Pixel security update fixes 110 vulnerabilities, including a high-severity zero-day that the company says may be under limited, targeted exploitation.
Acronis Warns of Actively Exploited Linux Privilege Escalation Flaw
Acronis has warned of CVE-2026-87886, a high-severity Linux privilege escalation vulnerability affecting its cPanel, WHM, and Plesk backup integrations.
Malicious WordPress Plugin Update Backdoors 1,500 Sites
A compromised Admin Menu Editor Pro update installed a web shell and hidden user accounts on WordPress sites, with at least 1,500 sites potentially affected.
Different Types of Cybersecurity Vulnerabilities Explained
Cybersecurity vulnerabilities come in many forms. Learn what zero-day, n-day, RCE, SQL injection, XSS, privilege escalation, CVE, and other common vulnerability types actually mean.
US Confirms Space Force Has Weapons Deployed in Orbit
The United States has confirmed for the first time that the Space Force has deployed weapons in orbit, revealing a new level of military preparedness as threats in space continue to evolve.
Critical WordPress Plugin Flaws Put 600,000 Websites at Risk
Two critical vulnerabilities in The Events Calendar WordPress plugin could allow unauthenticated attackers to reset administrator passwords and execute commands on vulnerable websites.
Microsoft Rushes Out Emergency Windows 11 Update After Record Patch Causes Problems
Microsoft has released an emergency Windows 11 update to fix Remote Desktop, USB audio, and Hyper-V issues caused by its record-breaking September Patch Tuesday release.
Chinese Hackers Exploit Chrome and Windows Flaws to Deploy GRIMWEDGE
Chinese threat actor UTA0560 has been linked to attacks targeting NGOs that exploited Google Chrome and Windows security flaws to deliver the GRIMWEDGE JavaScript backdoor.
Critical LiteSpeed Flaw Could Give Shared Hosting Users Root Access
A critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privilege hosting account to bypass security isolation and gain root access on shared-hosting servers. Administrators are urged to update to version 6.3.7.
WordPress Will Now Automatically Block Risky Plugin Updates
WordPress is introducing automated security reviews for plugin releases, allowing high-risk updates to be blocked before they reach users through the WordPress.org update system.
Telegram Desktop Flaw Could Hide JavaScript Inside Chat Exports
A Telegram Desktop vulnerability allowed malicious bot messages to hide JavaScript inside exported HTML chats, potentially exposing messages when old files were opened in a browser.
Apple Finally Brings Siri AI and New Child Safety Features to iPhone
Apple has started rolling out iOS 27 with its long-awaited Siri AI, new Apple Intelligence features, and expanded parental controls designed to make digital experiences safer for children.
Hackers Hijack HBO Max Reddit Account to Push Malware Ads
Hackers compromised HBO Max’s verified Reddit account and used malicious ads to spread ClickFix attacks targeting Windows and macOS users.
Japan Government Data Breach May Have Exposed 246,000 Records
Japan’s Digital Agency says a VPN vulnerability may have exposed names, email addresses, phone numbers and physical addresses from around 246,000 records.
