The latest cybersecurity news in Security Updates.
Cisco fixed 35 vulnerabilities, including critical NX-OS flaws that allow unauthenticated root code execution on Nexus 3000 and 9000 switches and CVSS 10 bugs in License On-Prem.
Google's October Android bulletin patches 25 Framework and System vulnerabilities under a single 2026-10-01 patch level, led by a critical local privilege escalation bug.
Google has released Chrome 155 with patches for 247 vulnerabilities, four of them rated critical. There is no evidence any of the flaws are exploited in the wild.
The WordPress project released version 7.1.3 on October 6 with seven security fixes and four bug fixes, urging site owners to update immediately.
MediaTek's monthly security bulletin lists two critical out-of-bounds write flaws in modem firmware affecting more than 50 chipsets, alongside nine high-severity issues in video, AI and modem components.
The Apache Software Foundation released httpd 2.4.69 on October 1, closing 20 vulnerabilities. Five are rated moderate, including a stack overflow in mod_vhost_alias reachable through an oversized Host header.
Microsoft shipped V2 builds of its September 2026 Exchange Server security updates at the start of October, adding a fix for an elevation of privilege flaw it found internally.
