Cybersecurity News

The Oracle Critical Patch Update for January 2026 delivers 337 new security fixes across the company’s software portfolio. Oracle published the advisory on January 20, 2026. The patches …

On August 20, 2026, Broadcom disclosed 91 Spring CVEs across Spring Framework and related projects, one of the largest single security events the ecosystem has recorded. A CVE, …

The Linux Foundation will govern TRACE, a new open standard for AI runtime attestation, the nonprofit said Tuesday. Contributed by confidential computing vendor OPAQUE, the specification was built …

A miniOrange SAML SSO vulnerability let unauthenticated attackers sign in to WordPress as any user, administrators included. Patchstack published the analysis on 21 August 2026, crediting the DigitalOcean …

Car head unit malware has been found for the first time spreading through the software update system built into a vehicle’s dashboard. Kaspersky researcher Dmitry Kalinin uncovered the …

The Microsoft SharePoint Venom attack is targeting executives with credential phishing and OAuth abuse, according to new research. The campaign weaponizes SharePoint links and consent prompts to gain …

Google Network Warning guidance urges Android users to lock down connections on legacy cellular networks and untrusted Wi‑Fi. Google highlights how attackers exploit 2G fallbacks, rogue access points, …

Samsung Galaxy upgrade offer is now officially confirmed, forcing millions of users to make a time-sensitive decision on device updates and security coverage. Samsung has outlined new upgrade …

Junos OS vulnerabilities dominated this week as Juniper Networks issued coordinated fixes across Junos OS and Junos OS Evolved. The company published multiple advisories and urged immediate upgrades. …

Chrome 2FA protection is rolling out to Windows users to reduce account takeovers that bypass multi-factor authentication. Google is introducing device-bound session credentials in Chrome, binding session tokens …