Fortinet security advisory (AV26-1145)

WatchGuard security advisory (AV26-1147)

Adobe security advisory (AV26-1146)

Apache Patches Critical HTTP Server RCE Found by Anthropic, Google

The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled. The post Apache Patches Critical HTTP Server RCE Found by Anthropic, Google appeared first on SecurityWeek.

Palo Alto tracks a massive Chinese AI attack that sadly lives up to industry fears

Palo Alto Networks Unit 42 is reporting today that it has tracked a massive China-based attack leveraging the open-source AI penetration testing framework Cairn to autonomously conduct 25 operations against at least 19 organizations. The attackers weaponized Cairn by pairing it with Chinese AI models Zhipu GLM and DeepSeek, Unit 42 said. The report said it monitored the attacks in August and September 2026 in which t…