https://onesignaldesk.com/news/wordpress-7-1-4-update-rce-exploit-attempts-check-version OneSignalDesken 2026-10-30T23:00:00+08:00 WordPress 7.1.4 Fixes an Unauthenticated Update-Time RCE Attackers Are Already Probing: Check Your Version https://onesignaldesk.com/news/claude-code-2-1-313-cursor-marketplace-backdoor-check-ssh-keys OneSignalDesken 2026-10-30T21:00:00+08:00 Claude Code 2.1.313 in Cursor's Extension Marketplace Was Backdoored: Check Your SSH Keys Now https://onesignaldesk.com/news/drupal-commerce-core-cve-2026-118539-exploited-update-3-3-13 OneSignalDesken 2026-10-30T21:00:00+08:00 Drupal Commerce Core Flaw CVE-2026-118539 Is Being Exploited: Update to 3.3.13 or 8.x-2.41 and Audit Orders https://onesignaldesk.com/news/google-chrome-156-0-8078-79-security-update OneSignalDesken 2026-10-30T16:30:00+08:00 Google Chrome 156.0.8078.79 Fixes 21 Security Flaws, One Critical: Update Again After Tuesday's Patch https://onesignaldesk.com/news/langflow-critical-flaws-update-1-13-0 OneSignalDesken 2026-10-30T16:30:00+08:00 Langflow Critical Flaws Allow Code Execution: Update to 1.13.0 https://onesignaldesk.com/news/mistral-large-4-open-weights-license-pricing OneSignalDesken 2026-10-30T16:30:00+08:00 Mistral Large 4 Goes Open Weight: License, API Price, Reasoning Modes https://onesignaldesk.com/news/gitlab-cve-2026-97229-cisa-kev-ruby-update OneSignalDesken 2026-10-30T10:15:00+08:00 GitLab CVE-2026-97229: CISA Lists CVSS 10 CI Flaw as Exploited; Own-Ruby Servers Also Need a Ruby Update https://onesignaldesk.com/news/n8n-12-security-flaws-code-execution-update-2-45-5 OneSignalDesken 2026-10-29T21:00:00+08:00 n8n Fixes 12 Security Flaws, Three Rated High for Code Execution. Update to 2.45.5 or 1.123.89 https://onesignaldesk.com/news/aws-strands-agents-tools-cve-2026-115415-environment-secrets OneSignalDesken 2026-10-29T19:40:00+08:00 AWS Strands Agents Tools CVE-2026-115415: A Crafted Prompt Can Unmask Your Agent's Keys. Update to 0.8.6 https://onesignaldesk.com/news/palo-alto-pan-os-php2shell-cve-2026-109618-exploited OneSignalDesken 2026-10-29T19:40:00+08:00 Palo Alto PAN-OS Firewalls Attacked via PHP2Shell Flaws CVE-2026-109618 and CVE-2026-109619: Patch Now https://onesignaldesk.com/news/freeswitch-cve-2026-116779-sip-message-exploited OneSignalDesken 2026-10-29T13:50:00+08:00 FreeSWITCH Flaw CVE-2026-116779 Is Being Exploited to Run Commands With One SIP Message: Update to 1.11.3 https://onesignaldesk.com/news/openai-chatgpt-pro-business-free-api-credits OneSignalDesken 2026-10-29T13:50:00+08:00 OpenAI Gives ChatGPT Pro and Business Subscribers Up to $500 a Month in Free API Credits: How to Claim Them https://onesignaldesk.com/news/cisco-asa-ftd-ssl-vpn-dos-cve-2026-76418-exploited OneSignalDesken 2026-10-29T13:20:00+08:00 Cisco ASA and FTD Flaw CVE-2026-76418 Is Being Exploited to Crash VPN Firewalls: Update Now https://onesignaldesk.com/news/veeam-backup-replication-13-cve-2026-108142-patch OneSignalDesken 2026-10-29T13:20:00+08:00 Veeam Backup & Replication 13 Flaw CVE-2026-108142 Lets Attackers Bypass Authorization: Update to 13.1.2 https://onesignaldesk.com/news/github-universe-copilot-fusion-agentic-workflows-ga OneSignalDesken 2026-10-29T09:05:00+08:00 GitHub Copilot Fusion and Agentic Workflows Are Now GA: What Universe 2026 Changes for Small Teams https://onesignaldesk.com/news/google-gemini-4-carbon-price-access-api-status OneSignalDesken 2026-10-29T09:05:00+08:00 Google Gemini 4 Carbon: $2/$10 per Million Tokens at Launch, but Developers Can't Use It Yet https://onesignaldesk.com/news/litellm-enterprise-proxy-master-key-leak OneSignalDesken 2026-10-29T08:05:00+08:00 LiteLLM Enterprise proxy flaw can leak master and provider keys: update to the fixed versions https://onesignaldesk.com/news/eclipse-che-machine-exec-cve-2026-114278 OneSignalDesken 2026-10-29T07:05:00+08:00 Eclipse Che che-machine-exec flaw lets attackers run commands in workspaces: update to 7.123.0 https://onesignaldesk.com/news/ghostaction-github-vs-code-font-stealer OneSignalDesken 2026-10-28T23:35:00+08:00 GhostAction GitHub attack hit nearly 23,000 repos, GitGuardian says, and now steals keys via a VS Code task