News that matters, without the noise.

CVE-2026-89322

High Severity Description Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of

CVE-2026-107314

Medium Severity Description pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth

Cisco Meraki Security Hardening Release: October 2026

As part of Cisco’s ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal

DSA-6549-1 xz-utils – security update

https://security-tracker.debian.org/tracker/DSA-6549-1

USN-8900-1: Go Networking vulnerabilities

It was discovered that Go Networking did not properly handle server errors after sending a GOAWAY frame during

Evolution of Web3 in Cloud Supply Chain Attacks

Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud

SVD-2026-1003: Third-Party Package Updates in Splunk Enterprise – September/October 2026

Splunk remedied common vulnerabilities and exposures (CVEs) in third-party packages in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and

SVD-2026-1004: Security Vulnerability in Splunk MCP Server – September/October 2026

In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of

SVD-2026-1005: Third-Party Package Updates in Splunk Add-on for Amazon Web Services – September 2026

Splunk remedied common vulnerabilities and exposures (CVEs) in third-party packages in Splunk Add-on for Amazon Web Services version

Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance

CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment

USN-8895-1: Sudo vulnerability

It was discovered that Sudo did not properly handle time-based access restrictions when sudoers rules used NOTBEFORE or