April 30, 2026—KB5083631 (OS Builds 26200.8328 and 26100.8328) Preview

None None...

OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams

OpenAI on Tuesday unveiled GPT-5.4-Cyber , a variant of its latest flagship model, GPT‑5.4, that's specifically optimized for defensive cybersecurity use cases, days after rival Anthropic unveiled its own frontier model, Mythos. "The progressive use of AI accelerates defenders – those responsible...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, github-mcp-server, omnibump, sftpgo-plugin-eventsearch, ingress-nginx-controller, metacontroller, nfs-subdir-external-provisioner, polaris, mariadb-operator, oras, temporal, goreleaser, tailscale, flux-source-controller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cerbos, grafana-rollout-operator, sftpgo-plugin-eventsearch, crossplane-provider-keycloak, ingress-nginx-controller, cadvisor, kubernetes-csi-external-resizer, terraform-provider-random, kubernetes-event-exporter, task, memcached-exporter, kube-arangodb,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: cerbos, grafana-rollout-operator, kubo, ingress-nginx-controller, kubernetes-csi-external-resizer, task, metrics-server, snyk-cli, kube-arangodb, op-geth, tempo, goreleaser, tailscale, temporal, azure-service-operator, zarf, cortex, argo-workflows, envoy-gateway,...

March 26, 2026—KB5079391 (OS Builds 26200.8116 and 26100.8116) Preview

None None...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.4 security update

Important: Red Hat OpenShift GitOps v1.18.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-8439 CVE-2025-12816 openshift-gitops-1/console-plugin-rhel8: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.5 security update

Important: Red Hat OpenShift GitOps v1.17.5 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-8438 CVE-2025-12816 openshift-gitops-1/console-plugin-rhel8: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic...

Instagram flagged explicit messages to minors in 2018. Image-blurring arrived six years later

Meta took six years to blur explicit images on Instagram, even though internal emails show executives were aware in 2018 that minors were receiving them, according to newly unsealed court documents. In a deposition given last year, Adam Mosseri now the head of Instagram discusses an email thread...

February 24, 2026—KB5077239 (OS Build 28000.1643) Preview

None None...

5 Best Cisco Vulnerability Management Replacements

The end-of-life announcement for Cisco Vulnerability Management formerly Kenna Security might feel like a disruption, but it’s actually a perfect opportunity to re-evaluate your entire security strategy. For years, teams have been stuck in a reactive cycle, chasing an endless list of CVEs with...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 145 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 145.0.7632.45 Linux 145.0.7632.45/46 Windows/Mac contains a number of fixes and improvements -- a list of changes is availab...

January 29, 2026—KB5074105 (OS Builds 26200.7705 and 26100.7705) Preview

None None...

WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware

Meta on Tuesday announced it's adding Strict Account Settings on WhatsApp to secure certain users against advanced cyber attacks because of who they are and what they do. The feature, similar to Lockdown Mode in Apple iOS and Advanced Protection in Android, aims to protect individuals, such as...

CVE-2023-25309

Cross Site Scripting XSS Vulnerability in Fetlife rollout-ui version 0.5, allows attackers to execute arbitrary code via a crafted url to the delete a feature functionality...

Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update

Microsoft has announced plans to improve the security of Entra ID authentication by blocking unauthorized script injection attacks starting a year from now. The update to its Content Security Policy CSP aims to enhance the Entra ID sign-in experience at "login.microsoftonline.com" by only letting...

6 Best CTEM Vendors: A Head-to-Head Comparison

Your team just ran a vulnerability scan and now you’re staring at a list of thousands of CVEs. The big question is, what do you fix first? Relying on CVSS scores alone doesn’t tell you which of these vulnerabilities are actually exploitable in your environment or which ones protect your most...

The 5-Step Exposure Remediation Automation Process

Security teams are often buried under a mountain of vulnerability alerts. The daily reality is a constant scramble to patch the most critical issues, leaving a massive backlog of lower-priority—but still dangerous—exposures. This reactive cycle is exhausting and unsustainable. It’s like trying to...

EUVD-2025-36815

Malicious code in trezor-rollout npm...

MAL-2025-49053 Malicious code in trezor-rollout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ddacc3033f82ae4ac26ccf3e7b622d3f3d7d8e04418bd1375f8770137641a7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...