https://onesignaldesk.com/news/freeswitch-cve-2026-116779-sip-message-exploited OneSignalDesken 2026-10-29T13:50:00+08:00 FreeSWITCH Flaw CVE-2026-116779 Is Being Exploited to Run Commands With One SIP Message: Update to 1.11.3 https://onesignaldesk.com/news/openai-chatgpt-pro-business-free-api-credits OneSignalDesken 2026-10-29T13:50:00+08:00 OpenAI Gives ChatGPT Pro and Business Subscribers Up to $500 a Month in Free API Credits: How to Claim Them https://onesignaldesk.com/news/cisco-asa-ftd-ssl-vpn-dos-cve-2026-76418-exploited OneSignalDesken 2026-10-29T13:20:00+08:00 Cisco ASA and FTD Flaw CVE-2026-76418 Is Being Exploited to Crash VPN Firewalls: Update Now https://onesignaldesk.com/news/veeam-backup-replication-13-cve-2026-108142-patch OneSignalDesken 2026-10-29T13:20:00+08:00 Veeam Backup & Replication 13 Flaw CVE-2026-108142 Lets Attackers Bypass Authorization: Update to 13.1.2 https://onesignaldesk.com/news/github-universe-copilot-fusion-agentic-workflows-ga OneSignalDesken 2026-10-29T09:05:00+08:00 GitHub Copilot Fusion and Agentic Workflows Are Now GA: What Universe 2026 Changes for Small Teams https://onesignaldesk.com/news/google-gemini-4-carbon-price-access-api-status OneSignalDesken 2026-10-29T09:05:00+08:00 Google Gemini 4 Carbon: $2/$10 per Million Tokens at Launch, but Developers Can't Use It Yet https://onesignaldesk.com/news/litellm-enterprise-proxy-master-key-leak OneSignalDesken 2026-10-29T08:05:00+08:00 LiteLLM Enterprise proxy flaw can leak master and provider keys: update to the fixed versions https://onesignaldesk.com/news/eclipse-che-machine-exec-cve-2026-114278 OneSignalDesken 2026-10-29T07:05:00+08:00 Eclipse Che che-machine-exec flaw lets attackers run commands in workspaces: update to 7.123.0 https://onesignaldesk.com/news/ghostaction-github-vs-code-font-stealer OneSignalDesken 2026-10-28T23:35:00+08:00 GhostAction GitHub attack hit nearly 23,000 repos, GitGuardian says, and now steals keys via a VS Code task https://onesignaldesk.com/news/dell-data-domain-oracle-ebs-brief OneSignalDesken 2026-10-28T22:35:00+08:00 Dell Data Domain and Oracle E-Business Suite critical flaws: upgrade DD OS, apply Oracle's October patch https://onesignaldesk.com/news/anthropic-red-team-five-exploits OneSignalDesken 2026-10-28T21:35:00+08:00 Anthropic's AI model chained flaws into 5 working exploits: patch Linux for CVE-2026-98432 https://onesignaldesk.com/news/google-chrome-156-security-update-4-critical-cves-156-0-8078-73 OneSignalDesken 2026-10-28T19:05:00+08:00 Google Chrome 156 Fixes 52 Security Flaws, 4 of Them Critical: Update to 156.0.8078.73 or Later https://onesignaldesk.com/news/php-plex-nextcloud-kev-patch-threat-roundup-1 OneSignalDesken 2026-10-28T18:00:00+08:00 PHP, Plex and Nextcloud's Collabora App Under Attack, Plus a Node.js Fix: Patch & Threat Roundup #1 https://onesignaldesk.com/news/jupiter-x-core-cve-2026-106013-x-login-bypass-update-4-62 OneSignalDesken 2026-10-28T15:07:00+08:00 Jupiter X Core Flaw Lets Attackers Log In as a Site's Admin Through X Login: Update to 4.62.0 https://onesignaldesk.com/news/llama-cpp-cve-2026-118375-rpc-server-rdma-update-b11865 OneSignalDesken 2026-10-28T15:07:00+08:00 llama.cpp RPC Server Flaw CVE-2026-118375 Can Crash or Take Over Exposed Hosts: Update to b11865 https://onesignaldesk.com/news/pie-register-premium-cve-2026-84999-file-upload-update-3-8-4-1 OneSignalDesken 2026-10-28T15:07:00+08:00 Pie Register Premium Flaw Lets Anyone Upload Files and Take Over WordPress Sites: Update to 3.8.4.1 https://onesignaldesk.com/news/gmo-onamae-desktop-cloud-breach-back-up-power-off-pcs OneSignalDesken 2026-10-28T11:45:00+08:00 GMO's Onamae Desktop Cloud Breach: Back Up, Disconnect and Power Off Your PC, GMO Tells Customers https://onesignaldesk.com/news/watchguard-firebox-fireware-critical-flaws-update-2026-4 OneSignalDesken 2026-10-28T11:45:00+08:00 WatchGuard Firebox Gets Fixes for Seven Critical Fireware OS Flaws: Update to 2026.4, 12.12.4 or 12.5.22 https://onesignaldesk.com/news/mlflow-cve-2026-116692-update-3-17 OneSignalDesken 2026-10-28T10:45:00+08:00 MLflow CVE-2026-116692 (CVSS 9.8) Lets Callers Run Code on No-Login Tracking Servers: Update to 3.17 https://onesignaldesk.com/news/keystone-website-breach-webauth-key-stolen-what-to-do OneSignalDesken 2026-10-28T07:18:00+08:00 Keystone Wallet Website Breach Exposes 25,964 Buyers' Details and Its Device-Check Key: What to Do https://onesignaldesk.com/news/adobe-commerce-magento-cve-2026-48356-exploited-patch OneSignalDesken 2026-10-28T07:15:00+08:00 Adobe Commerce and Magento Flaw CVE-2026-48356 Is Now Exploited, CISA Says: Install the July 2026 Patch https://onesignaldesk.com/news/agno-cve-2026-35002-eval-code-execution-upgrade-2-3-24 OneSignalDesken 2026-10-27T22:17:00+08:00 Agno eval() Flaw CVE-2026-35002, Fixed in 2.3.24 on January 8, Gets a GitHub Advisory: Check Old Installs https://onesignaldesk.com/news/hpe-aruba-aos-8-aos-10-critical-flaws-update OneSignalDesken 2026-10-27T22:17:00+08:00 HPE Aruba Patches 72 Flaws in AOS-8 and AOS-10 Wireless Software, Eight Rated CVSS 10: What to Update https://onesignaldesk.com/news/tailscale-ssh-privilege-escalation-flaws-what-to-do OneSignalDesken 2026-10-27T21:27:00+08:00 Tailscale 1.104.4 Fixes Serious Tailscale SSH and Serve Flaws: Update Every Node, Then Tighten SSH Rules https://onesignaldesk.com/news/openai-codex-claude-code-agents-md-downloads-function-color OneSignalDesken 2026-10-27T17:15:59+08:00 OpenAI Codex Targeted by Planted AGENTS.md to Install function-color Malware; Plus a Claude Code Token Demo https://onesignaldesk.com/news/dreamhost-email-ftp-sftp-password-resets-incident OneSignalDesken 2026-10-27T16:14:00+08:00 DreamHost Expires Some Email, FTP and SFTP Passwords After an Incident. What Account Owners Should Do Now https://onesignaldesk.com/news/openhands-sdk-google-mcp-toolbox-critical-flaws-patch OneSignalDesken 2026-10-27T15:36:00+08:00 OpenHands SDK and Google's MCP Toolbox Fix Critical Flaws in Self-Hosted AI Agent Tools. Update Now