12 News Items
HN · BleepingComputer · Krebs · Dark Reading · SANS · THN Intel · Unit 42 · Security.com
HN · BleepingComputer · Krebs · Dark Reading · SANS · THN Intel · Unit 42 · Security.com
📰 Cybersecurity News Headlines
Top stories from leading cybersecurity publications as of October 13, 2026.
-
Ghostscript flaw lets hackers hijack servers via PDF uploads
— Bleeping Computer
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code … -
North Korea Phishes Ukrainians for War Intel
— Dark Reading
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting p… -
Anthropic warns self-replicating AI could spread to your smart devices
— Bleeping Computer
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart o… -
Anthropic Finds Ingredients for Future AI Worms
— Dark Reading
Anthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shu… -
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
— Bleeping Computer
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively expl… -
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
— SANS ISC
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties … -
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
— The Hacker News
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens … -
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
— The Hacker News
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another… -
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
— The Hacker News
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security fir… -
ISC Stormcast For Tuesday, October 13th, 2026 https://isc.sans.edu/podcastdetail/10134, (Tue, Oct 13th)
— SANS ISC
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. -
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
— Dark Reading
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable … -
ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th)
— SANS ISC
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
🪲 NVD — Last 20 Scored Vulnerabilities
Latest scored CVEs from the National Vulnerability Database (16461 in last 30 days).
Critical: 3 · High: 14 · Medium: 3 · Low: 0. View full dashboard →
-
CVE-2026-97312
— CVSS 7.8 (HIGH)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi… -
CVE-2026-96956
— CVSS 8.0 (HIGH)
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. -
CVE-2026-96523
— CVSS 7.8 (HIGH)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi… -
CVE-2026-96522
— CVSS 7.8 (HIGH)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi… -
CVE-2026-96521
— CVSS 7.8 (HIGH)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi… -
CVE-2026-95696
— CVSS 6.5 (MEDIUM)
IBM WebSphere Application Server – Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception. -
CVE-2026-95695
— CVSS 7.4 (HIGH)
IBM WebSphere Application Server – Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization. -
CVE-2026-95641
— CVSS 7.8 (HIGH)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi… -
CVE-2026-95640
— CVSS 5.5 (MEDIUM)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-… -
CVE-2026-95639
— CVSS 8.6 (HIGH)
Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrar… -
CVE-2026-95638
— CVSS 7.8 (HIGH)
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a… -
CVE-2026-95637
— CVSS 7.8 (HIGH)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi… -
CVE-2026-95636
— CVSS 7.8 (HIGH)
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t… -
CVE-2026-95635
— CVSS 7.8 (HIGH)
Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Explo… -
CVE-2026-94520
— CVSS 4.9 (MEDIUM)
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. -
CVE-2026-94512
— CVSS 8.8 (HIGH)
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. -
CVE-2026-93909
— CVSS 9.1 (CRITICAL)
IBM WebSphere Application Server – Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled. -
CVE-2026-93905
— CVSS 8.2 (HIGH)
IBM WebSphere Application Server – Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances. -
CVE-2026-93895
— CVSS 9.1 (CRITICAL)
IBM WebSphere Application Server – Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods. -
CVE-2026-90530
— CVSS 9.3 (CRITICAL)
ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to…
Source: NVD CVE API 2.0
Generated by CryptXNet.ai Threat Intelligence Platform · October 13, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com
Leave a Comment