The CVE-2026-49869 flaw allows attackers to bypass Basic Auth without logging in, create workflows and, under certain conditions, execute commands in the worker. Versions 1.0.45 and 1.3.21 contain fixes.
CISA added CVE-2026-9586 in Sangoma Switchvox SMB to the Known Exploited Vulnerabilities catalog. The unauthenticated SQL injection could lead to remote code execution; a fix has been available since July.
Google has made Gemini 3.8 Flash available through the Gemini API and introduced the limited Flash Cyber model for Fairwind program partners.
Dropbox warned some users about unauthorized access to their accounts. The attacker reportedly exploited Lenovo ID email verification to sign in without knowing the Dropbox password.
Microsoft is addressing incident MO1465962, in which Safe Links in Defender for Office 365 is flagging legitimate URLs from Google Search as malicious.
The GeoNetwork project published security advisories for unauthenticated formatter uploads and a flaw in Saxon XSLT. Versions 4.4.12 and 4.2.17 also address CVE-2026-58400, rated CVSS 9.1.
The U.S. has unsealed an indictment against Searzhudin Aktulajev. Prosecutors allege he was involved in a campaign involving malicious Excel attachments sent to users of an unnamed freelance platform.
According to two reports, researchers used Claude Code to adapt an existing exploit for the older CVE-2021-31886 vulnerability from one WAGO PLC to a related model. This was neither a new vulnerability nor a confirmed attack in operation.
The USA and European partners took action against the Sality P2P botnet. Sinkholing is intended to block the delivery of new malicious payloads, but it does not remove existing infections.
Google is expanding the Android Ready SE initiative under the new name Android Digital Credential Alliance. It has also released a technical paper on using StrongBox for highly secure digital credentials.