HPE Patches Dozens of Critical Flaws in Networking Products
HPE last week released patches for 72 vulnerabilities in the AOS-8 and AOS-10 wireless operating systems of its Aruba networking products, including 33 critical-severity flaws.…
Category: SecurityWeek
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Tailscale is getting ready to ship a client update that addresses privilege escalation weaknesses in Tailscale SSH. Details of the bugs went public over the…
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
Denver Health Medical Plan (DHMP) is notifying 238,000 people that their personal and health information may have been compromised in a data breach. Based in…
Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
Eye Security researchers have disabled the update mechanism of an abandoned Popcorn Time fork and sinkholed its domains. A BitTorrent client that allowed users to…
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
A major hospital network in New Mexico raced to fix a cybersecurity issue on Monday that forced it to send ambulances to other hospitals and…
Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
Artificial intelligence giant Anthropic filed papers Monday for what could be the biggest initial public offering of stock ever even as its top executive warns…
Genesys Hack Exposes Customer Data From Internal Systems
Customer experience company Genesys says it has contained a cyberattack that involved unauthorized access to data. Headquartered in Menlo Park, California, Genesys is a provider…
Industrial Vendors Check Products for PHP2Shell Vulnerabilities
Industrial giants such as Siemens, Schneider Electric, ABB, Rockwell Automation and Johnson Controls have published advisories to inform customers about the impact of the recently…
Node2Shell Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
A vulnerability in Google’s Brotli data compression library, tracked as CVE-2026-111497 and dubbed Node2Shell, has led to security updates from Microsoft, the Node.js project and…
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
Tel Aviv-based Mave was founded in 2025 by Unit 8200 alumni Guy Eshel (CTO) and Raziel Oren (CEO). The funding announced on October 22, 2026…
Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
Prince of Persia, a threat group sponsored by the Iranian government, ran one of its command-and-control (C&C) servers from the United States this year, after…
Atlassian Patches 75 Flaws in Data Center and Server Products
Atlassian on Tuesday published its October 2026 security bulletin, which lists 162 high-severity and 14 critical-severity vulnerabilities. All of the entries are tied to third-party…