10 posts
iOS exploit P7 DarkSword steals crypto wallet contents, Anthropic agents submitted unauthorized forms, and unpatched Windows devices lose Update access from May 2027.
Microsoft enforces a Content Security Policy on Entra ID sign-in pages starting mid-October, Bitdefender exposes pre-installed Midnight Mimosa malware on low-cost Android phones, and Apple announced a launch event for October 13.
On-premises Exchange allows reading other users' mailboxes (CVSS 8.8), 543,000 GitHub credentials remain active after years of exposure, and Apple tightens AI agent access on macOS.
Apple patches a CoreGraphics vulnerability exploited in targeted attacks, Cisco SD-WAN Manager has a critical auth bypass actively exploited, and police arrested the 16-year-old operator of ransomware gang KillSec.
Apple patched an actively exploited CoreGraphics zero-day, TeamFiltration compromised forgotten M365 service accounts without MFA, and 16,000+ Supabase databases are leaking sensitive business data.
Apple launches Mac Mini M6 and Mac Studio today, Microsoft patches a record 974 flaws including two Windows zero-days, and WordPress patches a critical Click2Shell RCE.
Apple releases macOS 27 Golden Gate and iOS 27, N-able patches a fourth CVSS 10.0 critical flaw in N-central in five weeks, and Chrome fixes an actively exploited V8 zero-day.
KB5124008 breaks domain login on Windows 11, Chrome and Firefox patch 115 vulnerabilities, and Parallels Desktop has a root access flaw with no fix for Intel Macs.
A record-breaking Patch Tuesday with 966 fixes and 2 actively exploited zero-days, macOS security updates, and new critical CISA KEV flaws in SonicWall and JFrog.
macOS 27 launches today, a phishing wave hits Microsoft 365 via a fake passkey helpdesk, and CISA adds a critical ScreenConnect flaw.