The latest GitLab CE/EE updates address 13 vulnerabilities, including three high-severity defects.

The post GitLab Patches Code Execution, Information Disclosure Vulnerabilities appeared first on SecurityWeek.

OpenAI has expanded its Daybreak cybersecurity initiative with a new suite of tools and partnerships.

The post OpenAI Refocuses Cybersecurity Efforts on Patching Over Discovery appeared first on SecurityWeek.

Splunk patched an OS command injection in AI Toolkit, while Atlassian fixed dozens of flaws in third-party dependencies.

The post Atlassian, Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek.

Insufficient validation of user input allows an attacker to gain access to the underlying OS and elevate their privileges to root.

The post Critical Command Execution Vulnerability Patched in Cisco ISE appeared first on SecurityWeek.

Oracle has released its June 2026 Critical Security Patch Update to fix vulnerabilities in Communications, EBS, Enterprise Manager and other products.

The post Oracle’s Second Monthly Security Updates Deliver 245 Patches  appeared first on SecurityWeek.

The security defects could allow attackers to create or modify arbitrary files and access and modify protected resources.

The post Splunk, Palo Alto Networks Patch Severe Vulnerabilities appeared first on SecurityWeek.

Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution.

The post Critical Vulnerabilities Patched in Fortinet, Ivanti Products appeared first on SecurityWeek.

The flaws could lead to the disclosure of sensitive information, memory corruption, and disruption of normal system usage.

The post SAP Patches Critical NetWeaver, Commerce Vulnerabilities appeared first on SecurityWeek.

The company’s latest quarterly advisory describes high and medium-severity issues in BIG-IP, BIG-IQ, and NGINX.

The post F5 Patches Over 50 Vulnerabilities appeared first on SecurityWeek.

The patch was announced as Broadcom is attending the Pwn2Own hacking competition in Berlin this week.

The post High-Severity Vulnerability Patched in VMware Fusion appeared first on SecurityWeek.

Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure.

The post Fortinet, Ivanti Patch Critical Vulnerabilities appeared first on SecurityWeek.

While none of the flaws have been exploited in the wild, many of them could lead to arbitrary code execution.

The post Adobe Patches 52 Vulnerabilities in 10 Products appeared first on SecurityWeek.

The tech giant has also ported the patch for a recent deleted chats recovery issue to older versions of iOS.

The post Apple Patches Dozens of Vulnerabilities in macOS, iOS appeared first on SecurityWeek.

The bugs could be exploited to bypass security controls, access restricted services, and crash firewalls.

The post SonicWall Urges Immediate Patching of Firewall Vulnerabilities appeared first on SecurityWeek.

The browser refreshes resolve critical and high-severity vulnerabilities that could lead to arbitrary code execution.

The post Chrome 147, Firefox 150 Security Updates Rolling Out appeared first on SecurityWeek.

The company released 481 new security patches across 28 product families, including over 300 fixes for remotely exploitable, unauthenticated flaws.

The post Oracle Patches 450 Vulnerabilities With April 2026 CPU appeared first on SecurityWeek.

The flaws can be exploited remotely to impersonate users or execute arbitrary commands on the underlying OS.

The post Cisco Patches Critical Vulnerabilities in Webex, ISE appeared first on SecurityWeek.