Ivanti has released patches for two critical vulnerabilities in its Sentry secure mobile gateway, including CVE-2026-10520, a maximum-severity OS command injection flaw that could let attackers execute code with root privileges. The company also fixed CVE-2026-10523, an authentication bypass that could allow unauthenticated remote attackers to create rogue administrative accounts and gain full admin access, while saying there is no evidence of active exploitation. #Ivanti #Sentry #CVE-2026-10520 #CVE-2026-10523
Category: Cyber Security News
Veeam has issued patches for a critical flaw in Backup & Replication, tracked as CVE-2026-44963, that could allow remote code execution on the Backup Server by an authenticated domain user. The issue affects version 12.3.2.4465 and earlier 12.x builds, but not version 13.x, and was fixed in version 12.3.2.4854. #Veeam #CVE-2026-44963…
Meta is expanding how it uses information shared by businesses to personalize users’ Feed and AI chatbot responses, moving beyond ads while saying no new data is being collected. The company is also updating its privacy controls so users can manage whether off-platform activity is used for personalized content and ads….
Microsoft’s June 2026 Patch Tuesday addresses about 200 vulnerabilities across Windows, Azure, Office, Outlook, Exchange, and AI tools, including three publicly disclosed issues. The update also includes advisories for 360 third-party component flaws, while Adobe fixed more than 120 vulnerabilities in its own Patch Tuesday release. #CVE-2026-49160 #CVE-2026-50507 #CVE-2026-45586 #Windows #Azure…
Varonis tested an OpenClaw AI email agent against phishing simulations and found that it could be tricked into exposing sensitive internal data, including AWS keys, database credentials, and CRM exports. While the agent could spot suspicious URLs and malicious OAuth apps, it still failed when urgent requests bypassed identity verification and zero-trust thinking. #OpenClaw #Varonis #Gemini #GPT5.4 #Pinchy
ServiceNow warned customers that attackers exploited an unauthenticated API flaw to query data from customer instances, prompting the company to apply a security update on June 5, 2026. The incident affected some Australia release customers and older instances with certain configurations, with administrators advised to check logs for suspicious requests and review exposed support data. #ServiceNow #Australia
A security researcher known as Nightmare Eclipse has released “RoguePlanet,” a new Microsoft Defender zero-day exploit that can spawn a command prompt with SYSTEM privileges on fully patched Windows 10 and Windows 11 devices. The disclosure follows a series of disputed Windows zero-day releases and comes after Microsoft patched two other flaws during the June 2026 Patch Tuesday update. #RoguePlanet #NightmareEclipse #MicrosoftDefender #Windows10 #Windows11
Microsoft released its largest Patch Tuesday update on record, fixing 206 vulnerabilities across its business products and core systems. The update includes publicly known issues, a previously exploited zero-day in Microsoft Defender, and a max-severity flaw in Azure HorizonDB. #Microsoft #MicrosoftDefender #AzureHorizonDB #CVE-2026-41091 #CVE-2026-48567
Microsoft released Windows 11 KB5094126 and KB5093998 cumulative updates for 25H2/24H2 and 23H2, delivering June 2026 Patch Tuesday security fixes along with performance, reliability, and feature improvements. The updates add enhancements such as Shared Audio, improved Magnifier and Task Manager functionality, better Windows Hello behavior, and broader stability fixes across storage, USB, input, and Microsoft Store features. #Windows11 #KB5094126 #KB5093998 #PatchTuesday
Microsoft’s June 2026 Patch Tuesday fixes 200 flaws, including three publicly disclosed zero-day vulnerabilities in Windows Collaborative Translation Framework, HTTP.sys, and BitLocker. The update set spans critical issues across Office, SharePoint, Hyper-V, Remote Desktop Client, and Windows components, with mitigations added for the HTTP/2 “HTTP/2 Bomb” attack. #CVE-2026-45586 #CVE-2026-49160 #CVE-2026-50507 #HTTPsys #BitLocker #WindowsCollaborativeTranslationFramework #Calif #YellowKey #NightmareEclipse
Microsoft has released Windows 10 KB5094127 as an extended security update to address June 2026 Patch Tuesday vulnerabilities and to improve Secure Boot certificate rollout monitoring. It also includes File Explorer search improvements and a temporary workaround is available for a known BitLocker recovery issue affecting some systems. #Windows10 #KB5094127 #SecureBoot #BitLocker
SAP’s June 2026 Security Patch package fixes 15 vulnerabilities, including four critical flaws in SAP NetWeaver and SAP Commerce Cloud that could enable authentication bypass, memory corruption, and directory traversal attacks. Organizations using these products should prioritize patching CVE-2026-44748 and CVE-2026-27671 due to their high severity and potential impact on enterprise environments. #SAPNetWeaver #SAPCommerceCloud #CVE-2026-44748 #CVE-2026-27671
OpenSSL has released updates that fix 18 vulnerabilities, including CVE-2026-45447, a high-severity heap user-after-free flaw that could lead to remote code execution. The remaining patches address issues that may enable decryption of traffic, certificate forgery, denial-of-service attacks, integrity bypass, and other harmful outcomes. #OpenSSL #CVE-2026-45447 #PKCS7 #SMIME #Anthropic #ClaudeAI…
Anthropic has released Claude Fable 5 for general availability, adding strict safeguards that automatically limit its use in high-risk areas like cybersecurity and biology by falling back to Claude Opus 4.8. The company also upgraded trusted Project Glasswing participants to Claude Mythos 5, including partners such as Dragos, Tenable, TrendAI, Netskope,…
Adobe’s latest Patch Tuesday update fixes 123 vulnerabilities across 11 products, with major issues in Adobe Experience Manager, Campaign Classic, ColdFusion, and Acrobat and Reader. The company says it has not seen in-the-wild exploitation, but ColdFusion and Campaign Classic received the highest priority rating because they could be targeted in attacks….