⤷ Title: curl 8.23.0 Fixes Critical CVE-2026-92392 RCE Exploit
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 22:03:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Anthropic #curl #CVE_2026_92392 #HTTP/2 #RCE
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 22:03:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Anthropic #curl #CVE_2026_92392 #HTTP/2 #RCE
Information Security News
curl 8.23.0 Fixes Critical CVE-2026-92392 RCE Exploit
The curl development team expedited the release of version 8.23.0 to neutralize a perilous vulnerability that permits arbitrary code execution on client systems. Initially surfaced by Anthropic…
⤷ Title: Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 00:49:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backuply #CVE_2026_93953 #sql injection #Wordfence #wordpress
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 00:49:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backuply #CVE_2026_93953 #sql injection #Wordfence #wordpress
Daily CyberSecurity
Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability
TL;DR Wordfence disclosed a high-severity SQL injection vulnerability (CVE-2026-93953) in the Backuply WordPress plugin on October 15, 2026. The flaw allows authenticated subscribers to elevate th…
⤷ Title: AWS Patches Critical Amazon Neptune Vulnerability in Apache TinkerPop Gremlin
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 00:44:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Neptune #Apache TinkerPop #AWS #CVE_2026_110812 #Gremlin
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 00:44:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Neptune #Apache TinkerPop #AWS #CVE_2026_110812 #Gremlin
Daily CyberSecurity
AWS Patches Critical Amazon Neptune Vulnerability in Apache TinkerPop Gremlin
TL;DR Amazon Web Services (AWS) published security bulletin 2026-136-AWS on October 15, 2026, addressing a critical Amazon Neptune vulnerability. Tracked as CVE-2026-110812 (CVSS 9.9), the flaw in…
⤷ Title: Mitsubishi Electric Patches Four Critical ICONICS Suite Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 01:22:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2023_4863 #CVE_2026_16436 #CVE_2026_16437 #CVE_2026_16438 #GENESIS64 #ICONICS Suite #Mitsubishi Electric
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 01:22:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2023_4863 #CVE_2026_16436 #CVE_2026_16437 #CVE_2026_16438 #GENESIS64 #ICONICS Suite #Mitsubishi Electric
Daily CyberSecurity
Mitsubishi Electric Patches Four Critical ICONICS Suite Vulnerabilities
TL;DR Mitsubishi Electric released a security advisory on October 15, 2026, addressing four critical and high-severity ICONICS Suite vulnerabilities. These flaws allow attackers to bypass authenti…
⤷ Title: Progress Software Patches Twelve High-Severity MOVEit Transfer Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 01:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_87093 #CVE_2026_89067 #CVE_2026_89068 #CVE_2026_89069 #CVE_2026_89076 #MOVEit Transfer #Progress Software
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 01:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_87093 #CVE_2026_89067 #CVE_2026_89068 #CVE_2026_89069 #CVE_2026_89076 #MOVEit Transfer #Progress Software
Daily CyberSecurity
Progress Software Patches Twelve High-Severity MOVEit Transfer Vulnerabilities
TL;DR Progress Software disclosed twelve high-severity MOVEit Transfer vulnerabilities on October 14, 2026. These security flaws enable authentication bypass, SQL injection, cross-site scripting, …
⤷ Title: Chrome 155 Update Fixes 10 Security Flaws, Including Critical Prerender Bug
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 04:18:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome 155 #CVE_2026_110913 #CVE_2026_110919 #CVE_2026_110922 #google chrome #use after free #V8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 04:18:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome 155 #CVE_2026_110913 #CVE_2026_110919 #CVE_2026_110922 #google chrome #use after free #V8
Daily CyberSecurity
Chrome 155 Update Fixes 10 Security Flaws, Including Critical Prerender Bug
TL;DR Google released Chrome 155.0.8059.84/.85 on October 15, 2026, with fixes for 10 vulnerabilities. This Chrome security update patches one critical use after free bug in Prerender and six high…
⤷ Title: Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 07:51:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ARMORY CASTLE #BeyondTrust #CVE_2023_46805 #CVE_2024_21887 #CVE_2026_102764 #Mandiant #zero_day
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 07:51:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ARMORY CASTLE #BeyondTrust #CVE_2023_46805 #CVE_2024_21887 #CVE_2026_102764 #Mandiant #zero_day
Daily CyberSecurity
Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE
TL;DR BeyondTrust disclosed a critical BeyondTrust Remote Support vulnerability (CVE-2026-102764) on October 15, 2026, that is actively exploited in the wild. Suspected PRC-nexus espionage actors …
⤷ Title: UAT-6275 Threat Actor Targets CIS Governments Using WinRAR Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 07:01:43 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #CVE_2025_8088 #Recorded Future #Silent Lynx #TAG_193 #UAT_6275
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 07:01:43 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #CVE_2025_8088 #Recorded Future #Silent Lynx #TAG_193 #UAT_6275
Daily CyberSecurity
UAT-6275 Threat Actor Targets CIS Governments Using WinRAR Exploit
TL;DR Security researchers uncovered an active espionage campaign led by the UAT-6275 threat actor against government agencies across the Commonwealth of Independent States (CIS). Between June 202…
⤷ Title: How a 56KB PNG Brought Down a Library with Millions of Downloads (CVE-2026–109398)
════════════════════════
𐀪 Author: Shaikikram
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 16:24:54 GMT
════════════════════════
⌗ Tags: #software_development #cve #open_source #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Shaikikram
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 16:24:54 GMT
════════════════════════
⌗ Tags: #software_development #cve #open_source #bug_bounty #cybersecurity
Medium
How a 56KB PNG Brought Down a Library with Millions of Downloads (CVE-2026–109398)
By Ikram (@Ikram-4)
⤷ Title: Rank Math SEO PRO Supply-Chain Compromise Exploited in the Wild via Version 3.0.123
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 04:15:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_111862 #Rank Math SEO PRO #supply chain attack #Wordfence #wordpress
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 04:15:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_111862 #Rank Math SEO PRO #supply chain attack #Wordfence #wordpress
Daily CyberSecurity
Rank Math SEO PRO Supply-Chain Compromise Exploited in the Wild via Version 3.0.123
TL;DR Rank Math SEO PRO for WordPress suffered a critical supply-chain compromise (CVE-2026-111862) that is actively exploited in the wild through trojanized version 3.0.123 packages. Attackers in…