GoKawiil - Tech News

1.

Microsoft Breaks Another Patch Tuesday Record (slashdot.org)

2026-09-09 | get YubiKey 5 NFC security key → | tags: microsoft, patch tuesday, zero-days

2.

Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days (bleepingcomputer.com)

2026-09-08 | get YubiKey 5 NFC security key → | tags: microsoft, patch tuesday, zero-day

3.

HPE patches critical ArubaOS-CX remote code execution flaw (bleepingcomputer.com)

2026-09-03 | get USB to RJ45 console cable network switch → | tags: arubaos-cx, hpe, buffer overflow

4.

AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up? (bleepingcomputer.com)

2026-08-28 | get Practical Vulnerability Management Andrew Magnusson book → | tags: nist, cve, action1

5.

Critical Elementor Pro bug exposes WordPress sites to RCE attacks (bleepingcomputer.com)

2026-08-20 | tags: elementor pro, wordpress, cve-2026-32475

6.

Max severity SAP Commerce Cloud flaw now targeted in attacks (bleepingcomputer.com)

2026-08-14 | tags: sap commerce cloud, cve-2026-58231, data hub adapter

7.

Critical 'Zoomsday' flaw enables total device takeover during Zoom calls — AI-assisted research only used 20 prompts to find an exploit to hack hundreds of millions of people. (tomshardware.com)

2026-08-13 | by Bruno Ferreira | tags: zoom, remote code execution, a.security

8.

This shocking Zoom bug allowed silent device takeovers on Android and iOS (androidauthority.com)

2026-08-12 | tags: zoom, android, ios

9.

Rails patches critical Active Storage flaw with RCE potential (bleepingcomputer.com)

2026-08-01 | tags: rails, activestorage, libvips

10.

JetBrains warns of critical TeamCity remote code execution flaw (bleepingcomputer.com)

2026-07-30 | tags: teamcity, jetbrains, cve-2026-63077

11.

vBulletin fixes critical pre-auth RCE flaw with public exploit (bleepingcomputer.com)

2026-07-28 | tags: vbulletin, cve-2026-61511, egidio romano

12.

It’s Laughably Easy to Poison Open-Weight AI Models, Researcher Finds (futurism.com)

2026-07-19 | by Frank Landymore | tags: open-weight ai models, semgrep, anthropic

13.

Tell HN: A new Nginx 0-day just dropped (news.ycombinator.com)

2026-06-18 | get Nginx Security Patch Kit → | tags: nginx, nginx 0-day, nginx remote code execution

14.

New Gogs zero-day flaw lets hackers get remote code execution (bleepingcomputer.com)

2026-05-28 | get Gogs Self-Hosting Git Service → | tags: gogs, zero-day, git

15.

Dead.Letter (CVE-2026-45185) – How XBOW found an unauthenticated RCE on Exim (news.ycombinator.com)

2026-05-12 | get Exim Email Server Security Kit → | tags: exim, cve-2026-45185, xbown

16.

Microsoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days (bleepingcomputer.com)

2026-05-12 | get Microsoft Security Update Kit → | tags: microsoft, patch tuesday, microsoft edge

17.

Ivanti warns of new EPMM flaw exploited in zero-day attacks (bleepingcomputer.com)

2026-05-07 | get Ivanti EPMM Security Patch → | tags: ivanti, epmm, zero-day

18.

Weaver E-cology critical bug exploited in attacks since March (bleepingcomputer.com)

2026-05-04 | get Cybersecurity Software Suite → | tags: weaver e-cology, cve-2026-22679, remote code execution

19.

GitHub fixes RCE flaw that gave access to millions of private repos (bleepingcomputer.com)

2026-04-29 | get GitHub Security Badge → | tags: github, git, github enterprise

20.

New Mirai campaign exploits RCE flaw in EoL D-Link routers (bleepingcomputer.com)

2026-04-22 | get D-Link Router Security Patch → | tags: mirai, d-link, cve-2025-29635

21.

Anthropic's Model Context Protocol includes a critical remote code execution vulnerability — newly discovered exploit puts 200,000 AI servers at risk (tomshardware.com)

2026-04-22 | by Luke James | get AI Security Monitoring Kit → | tags: anthropic, model context protocol, remote code execution

22.

Google Fixes Critical RCE Flaw in AI-Based 'Antigravity' Tool (darkreading.com)

2026-04-21 | by Elizabeth Montalbano | get AI-Powered Gravity Simulator → | tags: google, antigravity, prompt injection

23.

Google Fixes Critical RCE Flaw in AI-Based Antigravity Tool (darkreading.com)

2026-04-21 | by Elizabeth Montalbano | get AI Antigravity Device Kit → | tags: google, antigravity, pillar security

24.

Critical flaw in Protobuf library enables JavaScript code execution (news.ycombinator.com)

2026-04-19 | get Protobuf JavaScript Library → | tags: protobuf.js, google protocol buffers, npm registry

25.

Critical flaw in Protobuf library enables JavaScript code execution (bleepingcomputer.com)

2026-04-18 | get Protobuf JavaScript Library → | tags: protobuf.js, google protocol buffers, npm registry

26.

Over 14,000 F5 BIG-IP APM instances still exposed to RCE attacks (bleepingcomputer.com)

2026-04-02 | get F5 Networks BIG-IP Security Kit → | tags: f5 big-ip, apm, cve-2025-53521

27.

Are We Training AI Too Late? (darkreading.com)

2026-04-01 | by Nishawn Smagh | get AI Training Course Kit → | tags: greynoise, cybersecurity, remote code execution

28.

GIGABYTE Control Center vulnerable to arbitrary file write flaw (bleepingcomputer.com)

2026-03-31 | get GIGABYTE Control Center Software → | tags: gigabyte control center, cve-2026-4415, remote code execution

29.

Claude AI finds Vim, Emacs RCE bugs that trigger on file open (bleepingcomputer.com)

2026-03-31 | get Vim & Emacs Security Guide → | tags: vim, emacs, claude ai

30.

F5 BIG-IP Vulnerability Reclassified as RCE, Under Exploitation (darkreading.com)

2026-03-30 | get F5 Networks BIG-IP Security Book → | tags: f5 big-ip, cve-2025-53521, denial-of-service