Brief · Security
Docker disclosed a critical flaw in Docker Hub that let attackers reach other users' container repositories with a personal access token. The company has disclosed it under CVE-2026-105445.
Brief · Security
A critical heap buffer overflow in Ghostscript, tracked as CVE-2026-39919, could allow remote code execution through specially crafted PDF files. Servers that process PDF uploads are most exposed.
Brief · Security
Ivanti urged customers to patch an actively exploited zero-day in its Connect Secure remote access gateway. The feed summary gives no further technical details.
Brief · Security
Microsoft's October 2026 Patch Tuesday addresses 1,411 flaws, with one actively exploited zero-day and two publicly disclosed ones. Krebs reports the batch dwarfs September's near-1,000 fixes.