Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
1–15 of 56
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some that allow various unauthenticated actions. The most serious of the security issues, labeled critical in severity, is CVE-2026-110264 , an integer…
- Source
- CSO Online
Signal Vulnerability Could Keep Calls Alive After Users Hang Up
A critical Signal flaw could keep calls active after hang-up, exposing microphone or camera. Update to a fixed version immediately.
- Source
- Security Affairs
Hackers got a four-day head start on epic PHP2Shell vulnerability
Hackers were already probing the bug before defenders were told it existed.
- Source
- Ars Technica Security
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.
- Source
- SecurityWeek
Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.
- Source
- SecurityWeek
Critical PHP vulnerabilities expose most websites to potential compromise
Government agencies urged organizations to take their sites offline until they could be fixed.
- Source
- Cybersecurity Dive
PHP releases emergency fixes for 2 critical vulnerabilities
The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.
- Source
- CyberScoop
Microsoft Patches More Than 1,400 Security Flaws
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.
- Source
- Krebs on Security
Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes
Dell’s security team has had a busy week. The company has announced a slew of Common Vulnerabilities and Exposures (CVEs) impacting its Dell Container Storage Modules (CSM) and Dell System Update (DSU).
- Source
- CSO Online
Aws deception benchmark security vulnerabilities
Aws deception benchmark security vulnerabilities
- Source
- Help Net Security
A Record-Breaking Patch Tuesday for June 2026 – Krebs on Security
A Record-Breaking Patch Tuesday for June 2026 – Krebs on Security
- Source
- Krebs on Security
Openhack open source ai powered vulnerability research
Openhack open source ai powered vulnerability research
- Source
- Help Net Security
Patch Tuesday, May 2026 Edition – Krebs on Security
Patch Tuesday, May 2026 Edition – Krebs on Security
- Source
- Krebs on Security
vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution
12 vm2 flaws (CVSS up to 10.0) enable sandbox escape in ≤3.11.1, causing remote code execution risk; patched in 3.11.2.
- Source
- The Hacker News
Patch Tuesday, April 2026 Edition – Krebs on Security
Patch Tuesday, April 2026 Edition – Krebs on Security
- Source
- Krebs on Security