https://infosecledger.com/news/vulnerabilities/unauthenticated-rce-in-windows-dhcp-server/InfoSec Ledgeren2026-10-14T15:12:52ZUnauthenticated RCE in Windows DHCP Server Exposes Networks to Remote Attackshttps://infosecledger.com/news/ai/asml-boosts-2026-sales-forecast-to-44b-as-orders/InfoSec Ledgeren2026-10-14T12:11:24ZASML boosts 2026 sales forecast to €44B as orders stretch into 2030https://infosecledger.com/news/ai/6m-lines-refactored-gemini-4-argon-intro-rates/InfoSec Ledgeren2026-10-14T12:11:08Z6M lines refactored: Gemini 4 Argon intro rates expire Nov 30, prompting budget warningshttps://infosecledger.com/news/cyber-attacks/msps-lured-by-seo-poisoning-to-fake-watchguard/InfoSec Ledgeren2026-10-14T12:05:06ZMSPs Lured by SEO Poisoning to Fake WatchGuard Site That Stole Credentials Before Delivering Real VPN Clienthttps://infosecledger.com/news/vulnerabilities/cve-2026-110002-snazzy-social-media-feed-critical/InfoSec Ledgeren2026-10-14T04:02:36ZCVE-2026-110002: Snazzy Social Media Feed Critical Flaw Lets Auth Users Run Codehttps://infosecledger.com/news/vulnerabilities/10-8-0-abandoned-cart-pro-auto-login-flaw-enables/InfoSec Ledgeren2026-10-14T04:02:36Z10.8.0: Abandoned Cart Pro Auto-Login Flaw Enables Credential-Free Admin Account Hijackhttps://infosecledger.com/news/vulnerabilities/9-1-cvss-click-to-chat-for-whatsapp-v4-44-lets/InfoSec Ledgeren2026-10-14T02:38:52Z9.1 CVSS: Click to Chat for WhatsApp v4.44 Lets Attackers Run Shortcodes Without Loginhttps://infosecledger.com/news/vulnerabilities/9-8-cvss-critical-heap-overflow-in-windows-media/InfoSec Ledgeren2026-10-14T02:00:44Z9.8 CVSS: Critical Heap Overflow in Windows Media Foundation Enables Unauthenticated Network Code Executionhttps://infosecledger.com/news/vulnerabilities/cvss-9-3-aem-6-5-stored-xss-enables-session/InfoSec Ledgeren2026-10-13T23:45:47ZCVSS 9.3: AEM 6.5 Stored XSS Enables Session Hijacking and Privilege Escalationhttps://infosecledger.com/news/vulnerabilities/cvss-9-3-unauthenticated-attackers-read-files-in/InfoSec Ledgeren2026-10-13T23:14:33ZCVSS 9.3: Unauthenticated Attackers Read Files in Adobe ColdFusion RDS Flawhttps://infosecledger.com/news/vulnerabilities/cve-2026-20293-cisco-ucs-secure-boot-bypass/InfoSec Ledgeren2026-10-13T22:25:57ZCVE-2026-20293: Cisco UCS Secure Boot Bypass Requires Auth or Physical Access, No Workarounds Existhttps://infosecledger.com/news/vulnerabilities/cve-2026-105445-docker-hub-patched-critical-token/InfoSec Ledgeren2026-10-13T17:11:14ZCVE-2026-105445: Docker Hub Patched Critical Token Hijacking Flaw After Two-Year Exposurehttps://infosecledger.com/news/cyber-attacks/430m-empire-market-sales-land-operator-with-40/InfoSec Ledgeren2026-10-13T14:50:07Z$430M Empire Market Sales Land Operator With 40-Year Prison Term and $100M Asset Seizurehttps://infosecledger.com/news/vulnerabilities/nvidia-aistore-critical-flaw-lets-attackers/InfoSec Ledgeren2026-10-13T14:10:45ZNVIDIA AIStore Critical Flaw Lets Attackers Revoke Tokens Without Authhttps://infosecledger.com/news/ai/capital-shortage-looms-as-broadcoms-tan-says-ai/InfoSec Ledgeren2026-10-13T12:39:08ZCapital shortage looms as Broadcom's Tan says AI investors lack economic clarityhttps://infosecledger.com/news/vulnerabilities/9-9-cvss-score-marks-marklogic-server-admin/InfoSec Ledgeren2026-10-13T11:41:42Z9.9 CVSS Score Marks MarkLogic Server Admin Takeover Risk in Deprecated APIhttps://infosecledger.com/news/ai/alibabas-new-qwen-glasses-cost-450-add-eye/InfoSec Ledgeren2026-10-13T10:42:46ZAlibaba’s New Qwen Glasses Cost $450, Add Eye-Tracking on Pro Modelhttps://infosecledger.com/news/ai/chinese-mathematicians-form-8-organization/InfoSec Ledgeren2026-10-13T00:31:02ZChinese Mathematicians Form 8-Organization Alliance for AI Researchhttps://infosecledger.com/news/ai/suki-raises-90m-series-e-for-ai-scribe-targets-60/InfoSec Ledgeren2026-10-13T00:07:50ZSuki Raises $90M Series E for AI Scribe, Targets $60-80M Annual Revenuehttps://infosecledger.com/news/vulnerabilities/critical-sql-injection-in-phpmyfaq-lets-attackers/InfoSec Ledgeren2026-10-12T22:53:53ZCritical SQL Injection in phpMyFAQ Lets Attackers Steal Credentialshttps://infosecledger.com/news/vulnerabilities/9-9-cvss-authenticated-attackers-can-execute/InfoSec Ledgeren2026-10-12T20:37:57Z9.9 CVSS: Authenticated Attackers Can Execute Arbitrary Code in IBM Db2 Mirror for i 7.4-7.6 via CVE-2026-96012https://infosecledger.com/news/vulnerabilities/cve-2026-109238-crawl4ai-0-9-4-fixes-cvss-9-2/InfoSec Ledgeren2026-10-12T16:45:16ZCVE-2026-109238: Crawl4AI 0.9.4 Fixes CVSS 9.2 SSRF Letting API Users Reach Private Networkshttps://infosecledger.com/news/ai/metas-2-controls-unlock-idle-ai-capacity-for-ads/InfoSec Ledgeren2026-10-12T16:20:43ZMeta’s 2 Controls Unlock Idle AI Capacity for Ads Without Harming Core Performance