Zyxel GS1900 network switches that received the vendor’s earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch’s web management interface run commands on it without logging in. Zyxel has released newRead More »Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability in question is CVE-2024-27834 (CVSS score: 5.5), a case of improper authentication that could allow anRead More »Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy services is a Russian company whose founder’s web hosting business was ground zero for cyberattacksRead More »Want to Rent an Internet Address at the White House?

OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs. “Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 localRead More »OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run

A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker’s code then runs as root, according to advisories that Debian, Ubuntu, and APT’s developers published on November 4. The attack needs APT to retry failedRead More »Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below – CVE-2026-109593 (CVSS score: 9.1) – An unauthenticated file read vulnerability that could allow anRead More »SonicWall Won’t Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

Fridge cyberattacks are hitting more than just retailers. Now, they’re targeting blood banks and even U.S military bases.

Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that’s designed to modify an artificial intelligence (AI) agent’s trusted instructions to insert advertisements for a third-party AI gateway. The phenomenon has been codenamed prompt adware by Check Point Research. Called Haiou (meaning Seagull in Chinese), the jailbreak modifiesRead More »Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit

Security magazine looks at 5 data security stories from October 2026.