Cybersecurity

FreeRDP 3.31 brings numerous security and bug fixes plus faster graphics for AVC/H.264 remote-desktop sessions. Updating is recommended.

After the attack on Berlin’s state network, officials now concede that personal data may have leaked after all, according to the report.

The ShinyHunters group is widening its Salesforce attacks – recently Chanel, Pandora and Google. Over 1 billion records are said to have leaked.

Attackers are actively exploiting Zimbra flaw CVE-2026-73570 – unauthenticated code execution via SNMP. Over 270 servers are already compromised.

An Oracle flaw rated CVSS 10.0 (CVE-2026-21962) in the HTTP Server and WebLogic proxy is under active attack. CISA has set a patch deadline.

CISA flags four actively exploited critical flaws in macOS, SharePoint, VMware vCenter and the Windows IKE service. Apply updates urgently.

Attackers briefly laced the widely used Rust library arrayref with malicious code – via a disguised dependency. It was pulled after 86 minutes.

According to heise, the Midea PortaSplit can be controlled via Bluetooth without authentication – from about 10 metres. A firmware update is in the works.

A critical GitLab flaw (CVE-2026-19478, CVSS 9.4) lets unauthenticated attackers modify or delete projects – and it is already being exploited.

Samsung’s August security update fixes 56 flaws on Galaxy devices – including a clipboard bypass and several critical Android vulnerabilities.