Adobe Campaign Classic Patch: Eight Critical Flaws Fixed, Code Execution Risks Eliminated
Adobe released a patch for eight critical Campaign Classic vulnerabilities that could allow code execution and privilege escalation.
security
9 stories
Dahua camera hijack via P2P and weak auth – Immediate action required
Ukraine CERT warns of Dahua camera hijack through P2P and weak passwords. Disable P2P, update firmware, and monitor for unauthorized accounts.
PHP Releases Second Windows Update in Five Days to Patch PHP Brotli Flaw
PHP releases a second Windows update within five days to patch the PHP Brotli flaw (CVE-2026-111497) that can enable memory corruption and code execution.
Hardware Wallet Spyware: New Crypto Device Found with Embedded Tracking Software
A new hardware wallet model was discovered containing spyware that can exfiltrate private keys and device data, exposing users to theft and privacy loss.
Check Point AI Agent Misuse Risk Highlights Need for Least-Privilege Controls
Check Point AI agent can disable accounts without proper scope, underscoring the need for strict least-privilege controls in AI security workflows.
Microsoft Patch Tuesday 2026: 1,417 Vulnerabilities Including Exploited Shell Bypass
Microsoft released 1,417 security updates on Oct 13, 2026, fixing 78 critical flaws including a Windows Shell bypass and a .NET Framework feature bypass.
Identity Access Management Gaps Expose Organizations to Credential Theft
A new study shows that weak identity and access controls leave enterprises vulnerable to credential theft and data loss.
TLP Misuse: Why Traffic Light Protocol Labels Should Not Replace Internal Classification
Organizations are incorrectly using TLP labels as internal classification, leading to misaligned sharing rules and security gaps.
Anthropic Claude Injection: Live Internet Access Disabled for Internal AI Tests
Anthropic disabled live internet access for internal Claude tests after discovering injection and form-submission incidents that targeted real websites.