3 posts
Microsoft enforces a Content Security Policy on Entra ID sign-in pages starting mid-October, Bitdefender exposes pre-installed Midnight Mimosa malware on low-cost Android phones, and Apple announced a launch event for October 13.
Fake Cloudflare checks spread LunexStealer on 100+ compromised sites, Android patches 25 vulnerabilities including 7 critical, and Rejetto HFS CVE-2026-61500 (CVSS 9.3) is under active scanning.
A critical Cisco Secure Email Gateway flaw is already under active attack, a phishing campaign hides fraudulent emails using invisible Unicode characters, and Android patches 180 vulnerabilities.