Announcements

Google has released an updated Chrome version 151.0.7922.71/.72 for Windows and Mac and 151.0.7922.71 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, trigger memory corruption, bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of

IBM has released security updates to address several vulnerabilities affecting multiple IBM products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, perform cross-site scripting (XSS) attacks, gain elevated privileges, obtain sensitive information, or execute arbitrary commands, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. IBM WebSphere

VMware has released security updates to address several vulnerabilities affecting multiple VMware products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, obtain sensitive information, perform directory traversal and denialof- service attacks, execute arbitrary code, and gain access to the affected products. Sample of the addressed vulnerabilities: 1. VMware vCenter Authentication Bypass Vulnerability

Apple has released security updates to address several vulnerabilities across macOS Tahoe, Sequoia, Sonoma and Safari. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice (DoS) attacks, trigger process or kernel memory corruption, perform spoofing attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, or execute arbitrary code on the affected systems. Sample

Check Point has released a security update to fix multiple vulnerabilities affecting Check Point Security Management, Multi-Domain Security Management, and Security Gateways. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, or execute arbitrary commands and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Check Point

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to perform spoofing or data tampering attacks, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Azure Key Vault Elevation of Privilege Vulnerability

Oracle released its critical patch updates for July 2026, containing 1449 new security patches across multiple affected Oracle products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, bypass security restrictions, perform cross-site-scripting (XSS), server-side-request-forgery (SSRF), and SQL injection attacks, obtain sensitive information, manipulate data, or execute arbitrary code,

Mozilla has released security updates to address several vulnerabilities fixed in Firefox 153, Firefox ESR 140.13, and Firefox ESR 115.38. The addressed vulnerabilities could allow the attacker to gain elevated privileges, bypass security restrictions, obtain sensitive information, conduct denial-ofservice attacks, trigger memory corruption, perform spoofing and clickjacking attacks, execute arbitrary code, or gain access to

Tenable has released security updates to address several vulnerabilities across Tenable Security Center and third-party software components. The addressed vulnerabilities could allow the attacker to perform SQL injection, blind SQL injection, and command injection attacks, obtain sensitive information, manipulate files, bypass security restrictions, or execute arbitrary code, and gain access to the affected system. Sample

WordPress has released security updates to address two vulnerabilities affecting the WordPress Core. The addressed vulnerabilities could allow the attacker to perform SQL injection attacks, which may lead to remote code execution on the affected system. The addressed vulnerabilities: 1. WordPress REST API Batch-Route Confusion Vulnerability (CVE-2026-63030): CVSS: 9.8 Attack Vector: Network Attack Complexity: Low

Drupal has released security updates to address several vulnerabilities affecting multiple Drupal products. The addressed vulnerabilities could allow the attacker to perform cross-site scripting (XSS), path traversal, and SQL injection attacks, gain elevated privileges, bypass security restrictions, obtain sensitive information, or execute arbitrary code on the affected system, potentially leading to full compromise. Sample of

Tenable has released security updates to address several vulnerabilities across Nessus, Nessus Agent, and Tenable Identity Exposure. The addressed vulnerabilities could allow the attacker to perform SQL injection attacks, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of addressed vulnerabilities: 1. Tenable Nessus Agent Path Traversal Vulnerability (CVE-2026-15265): CVSS: 9.1 Attack

VMware has released security updates to fix several vulnerabilities affecting VMware Avi Load Balancer. The addressed vulnerabilities could allow the attacker to perform directory traversal attacks, bypass security restrictions, gain elevated privileges, or inject and execute arbitrary code on the affected products. Sample of the addressed vulnerabilities: 1. VMware Avi Load Balancer Authentication Bypass Vulnerability

Google has released an updated Chrome version 150.0.7871.124/.125 for Windows and Mac and 150.0.7871.124 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, trigger memory corruption, bypass security restrictions, obtainsensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Use-After-Free in Core

Adobe has released security updates to address several vulnerabilities affecting multiple Adobe products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, trigger memory corruption, perform server-side request forgery (SSRF), bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary commands, potentially leading to gaining access to the affected product.

Microsoft has released its monthly patch of security updates, known as Patch Tuesday. The mentioned patch addressed 570 flaws, including 3 publicly disclosed zero-day vulnerabilities. Microsoft has addressed multiple vulnerabilities that could allow attackers to gain elevated privileges, perform spoofing and denial-of-service attacks, bypass security restrictions, obtain sensitive information, or execute arbitrary code and gain

SonicWall has released security updates to fix several vulnerabilities affecting SonicWall SMA1000 Series Appliances. The addressed vulnerabilities could allow the remote attacker to perform a serverside request forgery (SSRF) attack or execute arbitrary operating system (OS) commands, potentially leading to the complete compromise of the affected system. The addressed vulnerabilities: 1. SonicWall SMA1000 Server-Side Request

Apache Tomcat has released a security update to address two vulnerabilities affecting multiple versions of Apache Tomcat. The addressed vulnerabilities could allow the attacker to obtain sensitive information or bypass security restrictions on the affected system. The addressed vulnerabilities: 1. Apache Tomcat Improper Handling of URL Encoding Vulnerability (CVE-2026- 59083): CVSS: 9.1 Attack Vector: Network

Google has released an updated Chrome version 150.0.7871.114/.115 for Windows and Mac and 150.0.7871.114 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, bypass security restrictions, inject arbitrary scripts, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Use After Free

IBM has released security updates to address several vulnerabilities affecting multiple IBM products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, gain elevated privileges, obtain sensitive information, perform server-side request forgery and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems. Sample of addressed vulnerabilities: