Google has pushed Chrome 155 to the Stable channel with fixes for 247 security issues, four of them rated critical. The Chrome 155 vulnerabilities span memory-safety and access-control defects, and Google’s advisory does not mention exploitation in the wild for…
Author: V Diwahar
The Anthropic Cyber Verification Program expanded on October 6, 2026, folding two earlier trusted-access efforts into one offering with three access tiers. Vetted security teams can now apply for reduced cyber safeguards on Claude Opus 5.5, Claude Sonnet 5.5 and…
Citrix has patched CVE-2026-88779, a SAML-related flaw in NetScaler ADC and NetScaler Gateway that attackers were already using before a fix existed. If your appliances handle SAML sign-in for remote access, single sign-on or AAA, this NetScaler SAML vulnerability is…
Edge infrastructure set the agenda in this cybersecurity weekly report for September 28 to October 4, 2026. Two Citrix NetScaler zero-days, patched on September 27, were attacked at scale all week as GreyNoise, Mandiant and LevelBlue documented several actors installing…
Fortinet disclosed CVE-2026-104286 on October 1, 2026, and CISA added it to the Known Exploited Vulnerabilities (KEV) catalog the same day. The flaw is critical, rated CVSS 9.8. An unauthenticated attacker can write arbitrary files to a FortiMail email security…
With the MCP Python SDK vulnerability, a successful login could still end with credentials going to the wrong destination. An affected client could send a user to the real identity provider, then submit sensitive OAuth material to an endpoint chosen…