https://appsecscoop.com/c/vulnerabilities/bank-of-america-assigns-4-000-staff-to-remediate/AppSec Scoopen2026-10-15T15:40:53ZBank of America assigns 4,000 staff to remediate AI-identified software vulnerabilitieshttps://appsecscoop.com/c/vulnerabilities/organisations-at-risk-aws-healthlake-mcp-ssrf/AppSec Scoopen2026-10-15T14:25:04ZOrganisations at Risk: AWS HealthLake MCP SSRF Lets Users Steal Temp Credentials via Pagination Tokenshttps://appsecscoop.com/c/vulnerabilities/sql-injection-in-link-whisper-free-0-9-7-allows/AppSec Scoopen2026-10-15T14:04:21ZSQL Injection in Link Whisper Free 0.9.7 Allows Blind Attacks on Affected Systemshttps://appsecscoop.com/c/vulnerabilities/litellm-gateway-flaws-allow-low-priv-users-to/AppSec Scoopen2026-10-15T14:03:03ZLiteLLM gateway flaws allow low-priv users to seize admin controlhttps://appsecscoop.com/c/vulnerabilities/unpatched-kanbn-0-6-0-ssrf-lets-attackers-steal/AppSec Scoopen2026-10-15T04:16:12ZUnpatched Kanbn 0.6.0 SSRF lets attackers steal cloud metadata and access internal services without credentialshttps://appsecscoop.com/c/vulnerabilities/unauthenticated-dgraph-zero-admin-flaw-risks/AppSec Scoopen2026-10-15T04:16:12ZUnauthenticated Dgraph Zero Admin Flaw Risks Cluster Stabilityhttps://appsecscoop.com/c/vulnerabilities/sharepoint-server-subscription-edition-users-face/AppSec Scoopen2026-10-15T04:16:12ZSharePoint Server Subscription Edition users face high-severity remote privilege escalation risk in CVE-2026-102866https://appsecscoop.com/c/vulnerabilities/znuny-header-flaw-allows-password-free-admin/AppSec Scoopen2026-10-15T04:16:12ZZnuny header flaw allows password-free admin login in versions before 7.3.7https://appsecscoop.com/c/vulnerabilities/unpatched-wordpress-sites-face-default-admin/AppSec Scoopen2026-10-15T04:07:27ZUnpatched WordPress sites face default admin takeover via Abandoned Cart Pro token forgery CVE-2026-97657https://appsecscoop.com/c/cyber-attacks/global-firms-hit-by-1b-scams-as-microsoft-and/AppSec Scoopen2026-10-15T04:07:27ZGlobal firms hit by 1B scams as Microsoft and Japan shut down YAM Store networkhttps://appsecscoop.com/c/vulnerabilities/net-dos-patch-available-for-versions-8-9-10-and-11/AppSec Scoopen2026-10-15T00:21:26Z.NET DoS Patch Available for Versions 8, 9, 10 and 11https://appsecscoop.com/c/vulnerabilities/net-pkcs-flaw-triggers-unauthenticated-cpu/AppSec Scoopen2026-10-15T00:21:26Z.NET Pkcs flaw triggers unauthenticated CPU exhaustion across versions 8 to 11https://appsecscoop.com/c/vulnerabilities/palo-alto-urges-strict-controls-as-checkov-3-3/AppSec Scoopen2026-10-15T00:21:26ZPalo Alto urges strict controls as Checkov 3.3 flaw allows local users to write files anywherehttps://appsecscoop.com/c/vulnerabilities/palo-alto-alerts-patch-cortex-xsoar-xsiam-os/AppSec Scoopen2026-10-15T00:21:26ZPalo Alto Alerts: Patch Cortex XSOAR/XSIAM OS Query Packs to Block Remote Command Executionhttps://appsecscoop.com/c/vulnerabilities/cisco-issues-urgent-updates-for-email-gateways/AppSec Scoopen2026-10-15T00:21:26ZCisco issues urgent updates for email gateways facing active exploitationhttps://appsecscoop.com/c/vulnerabilities/hestia-panel-users-urged-to-update-to-1-10-5/AppSec Scoopen2026-10-15T00:21:26ZHestia Panel Users Urged to Update to 1.10.5 After Critical Root Escalation Flawhttps://appsecscoop.com/c/cyber-attacks/major-ai-firms-face-containment-failures-as/AppSec Scoopen2026-10-14T18:58:42ZMajor AI firms face containment failures as models breach external systems due to missing security controlshttps://appsecscoop.com/c/vulnerabilities/stills-media-processor-patch-urgent-for-versions/AppSec Scoopen2026-10-14T18:29:09ZStills Media Processor Patch Urgent for Versions Before 25.24.2https://appsecscoop.com/c/vulnerabilities/juniper-junos-os-j-web-flaw-grants/AppSec Scoopen2026-10-14T18:11:30ZJuniper Junos OS J-Web flaw grants unauthenticated remote code executionhttps://appsecscoop.com/c/vulnerabilities/orgs-at-risk-juniper-bgp-flaw-allows/AppSec Scoopen2026-10-14T18:07:34ZOrgs at risk: Juniper BGP flaw allows unauthenticated root access if monitoring is activehttps://appsecscoop.com/c/vulnerabilities/microsoft-fixes-high-severity-net-wpf/AppSec Scoopen2026-10-14T12:55:36ZMicrosoft Fixes High-Severity .NET WPF Deserialization Flaw in Versions 8 to 11https://appsecscoop.com/c/cyber-attacks/openai-no-model-weights-or-source-code/AppSec Scoopen2026-10-14T12:27:08ZOpenAI: No Model Weights or Source Code Compromised by Engineer's Hidden USB Recorderhttps://appsecscoop.com/c/vulnerabilities/critical-iis-flaw-lets-attackers-run-code/AppSec Scoopen2026-10-14T05:18:17ZCritical IIS Flaw Lets Attackers Run Code Remotely, Urging Organizations to Patch Nowhttps://appsecscoop.com/c/vulnerabilities/critical-windows-heap-overflow-enables-remote/AppSec Scoopen2026-10-14T04:38:28ZCritical Windows Heap Overflow Enables Remote Code Execution, Urging Immediate Patching for Enterpriseshttps://appsecscoop.com/c/vulnerabilities/wordpress-plugin-flaw-allows-low-level-users-to/AppSec Scoopen2026-10-14T04:02:36ZWordPress plugin flaw allows low-level users to execute remote codehttps://appsecscoop.com/c/vulnerabilities/critical-windows-dns-flaw-lets-attackers-run-code/AppSec Scoopen2026-10-14T03:00:45ZCritical Windows DNS Flaw Lets Attackers Run Code Remotely Without Loginhttps://appsecscoop.com/c/vulnerabilities/microsoft-rpc-flaw-allows-remote-code-execution/AppSec Scoopen2026-10-14T02:26:14ZMicrosoft RPC flaw allows remote code execution on exposed systemshttps://appsecscoop.com/c/vulnerabilities/windows-schannel-flaw-cve-2026-85818-needs-urgent/AppSec Scoopen2026-10-14T01:38:50ZWindows Schannel flaw CVE-2026-85818 needs urgent patching attentionhttps://appsecscoop.com/c/vulnerabilities/critical-windows-vm-driver-flaw-enables-remote/AppSec Scoopen2026-10-14T01:38:50ZCritical Windows VM Driver Flaw Enables Remote Code Execution, NVD Rates Severity 9.8https://appsecscoop.com/c/vulnerabilities/adobe-aem-6-5-stored-xss-flaw-cve-2026-106629/AppSec Scoopen2026-10-14T00:37:45ZAdobe AEM 6.5 Stored XSS Flaw CVE-2026-106629 Risks Session Hijackinghttps://appsecscoop.com/c/vulnerabilities/aem-users-urged-to-patch-critical-cve-2026-48383/AppSec Scoopen2026-10-13T23:59:27ZAEM Users Urged to Patch Critical CVE-2026-48383 for Zero-Interaction Remote Code Executionhttps://appsecscoop.com/c/vulnerabilities/orgs-at-risk-unpatched-salty-docs-workflows/AppSec Scoopen2026-10-13T18:09:57ZOrgs at Risk: Unpatched Salty Docs Workflows Execute Fork Code, Exposing High-Value Tokens via CVE-2026-55675https://appsecscoop.com/c/cloud-security/yandex-cloud-services-disrupted-after-drone/AppSec Scoopen2026-10-13T18:09:57ZYandex Cloud services disrupted after drone strikes hit three Russian data centreshttps://appsecscoop.com/c/vulnerabilities/risesoft-y9-users-face-unauthenticated-file-write/AppSec Scoopen2026-10-13T18:09:57ZRisesoft-y9 users face unauthenticated file write risk in versions up to 9.6.11https://appsecscoop.com/c/vulnerabilities/organizations-face-supply-chain-risks-as-docker/AppSec Scoopen2026-10-13T18:03:54ZOrganizations Face Supply Chain Risks as Docker Patches Critical Token Reassignment Flaw CVE-2026-105445