Wed, Sep 09 · 06:00 AM CDT

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Summary
Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as

Summary
Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analysis published on September 7. When Apache loads any of the three appliances' own PHP scripts, th

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Summary
The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash, is assessed to be a patch bypass for CVE-2026-69414 (CVSS score: 7.8), also called S

Summary
SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application The vulner

Summary
cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there, run code as

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 33 minutes ago.

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 4 hours ago.

Summary
Collected from the Infosecurity Magazine news page during the latest run.