https://onesignaldesk.com/news/ghostaction-github-vs-code-font-stealer OneSignalDesken 2026-10-28T23:35:00+08:00 GhostAction GitHub attack hit nearly 23,000 repos, GitGuardian says, and now steals keys via a VS Code task https://onesignaldesk.com/news/dell-data-domain-oracle-ebs-brief OneSignalDesken 2026-10-28T22:35:00+08:00 Dell Data Domain and Oracle E-Business Suite critical flaws: upgrade DD OS, apply Oracle's October patch https://onesignaldesk.com/news/anthropic-red-team-five-exploits OneSignalDesken 2026-10-28T21:35:00+08:00 Anthropic's AI model chained flaws into 5 working exploits: patch Linux for CVE-2026-98432 https://onesignaldesk.com/news/google-chrome-156-security-update-4-critical-cves-156-0-8078-73 OneSignalDesken 2026-10-28T19:05:00+08:00 Google Chrome 156 Fixes 52 Security Flaws, 4 of Them Critical: Update to 156.0.8078.73 or Later https://onesignaldesk.com/news/php-plex-nextcloud-kev-patch-threat-roundup-1 OneSignalDesken 2026-10-28T18:00:00+08:00 PHP, Plex and Nextcloud's Collabora App Under Attack, Plus a Node.js Fix: Patch & Threat Roundup #1 https://onesignaldesk.com/news/jupiter-x-core-cve-2026-106013-x-login-bypass-update-4-62 OneSignalDesken 2026-10-28T15:07:00+08:00 Jupiter X Core Flaw Lets Attackers Log In as a Site's Admin Through X Login: Update to 4.62.0 https://onesignaldesk.com/news/llama-cpp-cve-2026-118375-rpc-server-rdma-update-b11865 OneSignalDesken 2026-10-28T15:07:00+08:00 llama.cpp RPC Server Flaw CVE-2026-118375 Can Crash or Take Over Exposed Hosts: Update to b11865 https://onesignaldesk.com/news/pie-register-premium-cve-2026-84999-file-upload-update-3-8-4-1 OneSignalDesken 2026-10-28T15:07:00+08:00 Pie Register Premium Flaw Lets Anyone Upload Files and Take Over WordPress Sites: Update to 3.8.4.1 https://onesignaldesk.com/news/gmo-onamae-desktop-cloud-breach-back-up-power-off-pcs OneSignalDesken 2026-10-28T11:45:00+08:00 GMO's Onamae Desktop Cloud Breach: Back Up, Disconnect and Power Off Your PC, GMO Tells Customers https://onesignaldesk.com/news/watchguard-firebox-fireware-critical-flaws-update-2026-4 OneSignalDesken 2026-10-28T11:45:00+08:00 WatchGuard Firebox Gets Fixes for Seven Critical Fireware OS Flaws: Update to 2026.4, 12.12.4 or 12.5.22 https://onesignaldesk.com/news/mlflow-cve-2026-116692-update-3-17 OneSignalDesken 2026-10-28T10:45:00+08:00 MLflow CVE-2026-116692 (CVSS 9.8) Lets Callers Run Code on No-Login Tracking Servers: Update to 3.17 https://onesignaldesk.com/news/keystone-website-breach-webauth-key-stolen-what-to-do OneSignalDesken 2026-10-28T07:18:00+08:00 Keystone Wallet Website Breach Exposes 25,964 Buyers' Details and Its Device-Check Key: What to Do https://onesignaldesk.com/news/adobe-commerce-magento-cve-2026-48356-exploited-patch OneSignalDesken 2026-10-28T07:15:00+08:00 Adobe Commerce and Magento Flaw CVE-2026-48356 Is Now Exploited, CISA Says: Install the July 2026 Patch https://onesignaldesk.com/news/agno-cve-2026-35002-eval-code-execution-upgrade-2-3-24 OneSignalDesken 2026-10-27T22:17:00+08:00 Agno eval() Flaw CVE-2026-35002, Fixed in 2.3.24 on January 8, Gets a GitHub Advisory: Check Old Installs https://onesignaldesk.com/news/hpe-aruba-aos-8-aos-10-critical-flaws-update OneSignalDesken 2026-10-27T22:17:00+08:00 HPE Aruba Patches 72 Flaws in AOS-8 and AOS-10 Wireless Software, Eight Rated CVSS 10: What to Update https://onesignaldesk.com/news/tailscale-ssh-privilege-escalation-flaws-what-to-do OneSignalDesken 2026-10-27T21:27:00+08:00 Tailscale 1.104.4 Fixes Serious Tailscale SSH and Serve Flaws: Update Every Node, Then Tighten SSH Rules https://onesignaldesk.com/news/openai-codex-claude-code-agents-md-downloads-function-color OneSignalDesken 2026-10-27T17:15:59+08:00 OpenAI Codex Targeted by Planted AGENTS.md to Install function-color Malware; Plus a Claude Code Token Demo https://onesignaldesk.com/news/dreamhost-email-ftp-sftp-password-resets-incident OneSignalDesken 2026-10-27T16:14:00+08:00 DreamHost Expires Some Email, FTP and SFTP Passwords After an Incident. What Account Owners Should Do Now https://onesignaldesk.com/news/openhands-sdk-google-mcp-toolbox-critical-flaws-patch OneSignalDesken 2026-10-27T15:36:00+08:00 OpenHands SDK and Google's MCP Toolbox Fix Critical Flaws in Self-Hosted AI Agent Tools. Update Now https://onesignaldesk.com/news/apple-ios-18-7-11-older-iphones-ipads-kev-update OneSignalDesken 2026-10-27T13:42:00+08:00 Apple Backports Exploited CoreGraphics Fix to iPhone XS, XR and iPad 7th Gen. Update to iOS 18.7.11 https://onesignaldesk.com/news/cloudflare-workers-ai-glm-5-3-kv-cache-data-exposure OneSignalDesken 2026-10-27T13:20:00+08:00 Cloudflare Workers AI Bug Put Other Customers' Data in 155 GLM-5.3 Responses Between Aug 27 and Sep 9 https://onesignaldesk.com/news/openai-gpt-6-1-terra-api-pricing-chatgpt-copilot OneSignalDesken 2026-10-27T13:20:00+08:00 OpenAI GPT-6.1 Terra: $1 In, $5 Out per Million API Tokens, Down From $2 and $12 for GPT-5.6 Terra https://onesignaldesk.com/news/postiz-critical-flaws-update-2-25-3-rotate-secrets OneSignalDesken 2026-10-27T12:26:00+08:00 Postiz Fixes 3 Critical Flaws That Let Signed-In Users Read Server Secrets or Forge Logins. Update to 2.25.3