October 13, 2026—KB5127646 (OS Build 28000.3231)

October 13, 2026—KB5127646 OS Build 28000.3231 Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5127646 includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release. Visit the...

Using risk cohorts to prioritize security updates

For many customers, the priority is to install the appropriate security updates as soon as possible. Customers with more complex environments may also conduct additional risk assessments to help prioritize their response. As security update packages address more CVEs, these customers face a...

A week in security (October 5 – October 11)

Last week on Malwarebytes Labs: ASOS breach update: Hackers stole customer details and shopping searches Attackers hijack country-code domains to impersonate Google and other services Amazon has an uncomfortably personal profile on you Meta’s Muse AI files away your friendships, arguments, and...

Fedora 44 : python3.13 (2026-67c5f750b3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-67c5f750b3 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Rocky Linux 9.6 [CIQ] Security Update: fapolicyd / fapolicyd-selinux (ciqsa-2026_1630)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261630 advisory. This advisory aggregates security fixes for the fapolicyd SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2022-1117. Tenable has extracted the preceding description...

Fedora 44 : kernel (2026-c2d6603acd)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c2d6603acd advisory. The 7.2.9-1 updates contain a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the Fedora...

Rocky Linux 9.6 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ciqsa-2026_1635)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261635 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2024-12797. Tenable has extracted the preceding description...

Fedora 43 : python3.13 (2026-1928c5d40b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1928c5d40b advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 43 : python3.11 (2026-37c784fc16)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-37c784fc16 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 44 : python3.11 (2026-f105922543)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f105922543 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Rocky Linux 8.6 [CIQ] Security Update: texlive / texlive-adjustbox / texlive-ae / texlive-algorithms / etc (ciqsa-2026_1610)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261610 advisory. This advisory aggregates security fixes for the texlive SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2018-17407. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: WALinuxAgent / WALinuxAgent-cvm / WALinuxAgent-udev (ciqsa-2026_1619)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261619 advisory. This advisory aggregates security fixes for the WALinuxAgent SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2019-0804. Tenable has extracted the preceding descripti...

python313-Jinja2-3.1.6-2.4 on GA media (moderate)

python313-Jinja2-3.1.6-2.4 on GA media Announcement ID: openSUSE-SU-2026:11992-1 Rating: moderate Cross-References: CVE-2014-0012 CVE-2016-10745 CVE-2019-10906 CVE-2020-28493 CVE-2024-22195 CVE-2024-34064 CVSS scores: CVE-2016-10745 SUSE : 8.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L...

Fedora 44 : openvpn (2026-eed9c789d3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eed9c789d3 advisory. Update to upstream 2.7.8 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 43 : cockpit (2026-9ff25022c1)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9ff25022c1 advisory. Automatic update for cockpit-368-1.fc43. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 44 : barman (2026-0b3030633b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0b3030633b advisory. Update to 3.20.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 43 : barman (2026-82691b59d6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-82691b59d6 advisory. Update to 3.20.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : 7zip (2026-b92ecada92)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b92ecada92 advisory. Some bugs and vulnerabilities were fixed Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 44 : kernel (2026-666b555ae8)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-666b555ae8 advisory. The 7.2.9 stable kernel update contains a number of important fixes across the tree Tenable has extracted the preceding description block directly from the...

Google issues Android security updates: who can get them and how

Google has published security fixes for Android. The October updates are available for Android operating system versions 14, 15, 16, 16-qpr2, and 17 where “qpr” stands for Quarterly Platform Release. QPRs are interim updates Google pushes out between major yearly cycles. These Android security...