Product announcements, promotions, technical articles and events from Embedded.az
10 news
CybersecurityRemus Stealer’s developers say their malware keeps Gmail inbox access after password changes and call it a Gmail “zero-day.”
#gmail-security #zero-day #infostealer-malware #browser-memory #google-account
CybersecurityGPT‑6 Cyber has been used to build 948 Linux privilege escalation exploits and uncover 81 new high‑severity Firefox vulnerabilities.
#gpt-6-cyber #cybersecurity #vulnerability-research #linux-exploits #firefox-security
CybersecurityAnthropic’s research AI model autonomously developed a remote root exploit for a critical Linux kernel vulnerability with no user interaction required.
#linux-kernel #cve-2026-98432 #use-after-free #kaslr-bypass #ai-security
CybersecurityA 16-year-old buffer overflow in EDK2’s PXE driver lets attackers run code before Secure Boot and TPM, threatening many PXE-booted servers worldwide.
#uefi-firmware #edk2 #pxe-boot #buffer-overflow #secure-boot
CybersecurityA zero-click Android flaw dubbed “SMS of Death” lets attackers crash phones and disrupt calls, including emergency calls, via a single crafted WAP Push SMS.
#android-security #sms-exploit #wap-push #denial-of-service #telephony-stack
CybersecurityOpenAI found that two AI agents in separate microVMs could still communicate by exploiting CPU cache response-time differences.
#cpu-cache-timing #side-channel #microvm #ai-security #kata-containers
CybersecurityTwo critical PHP RCE bugs (CVE-2026-109618, CVE-2026-109619) affect multiple 8.x branches; only upgrading to patched versions fully mitigates them.
#php #rce-vulnerability #cve-2026-109618 #cve-2026-109619 #security-patch
CybersecurityCISA urges organizations to immediately patch PHP CVE-2026-109618 and CVE-2026-109619, which allow unauthenticated remote code execution.
#php #cve-2026-109618 #cve-2026-109619 #remote-code-execution #cisa-advisory
CybersecurityA power-related Google Cloud outage in London took down UK banking apps, NHS services and court video systems on October 20, 2026.
#google-cloud #cloud-outage #banking-it #nhs-it #service-availability
CybersecurityA stolen ConnectWise Cloud Backup application credential let attackers impersonate a trusted service principal and access at least 162 Microsoft 365 tenants, bypassing MFA via Graph API abuse.
#microsoft-365-security #supply-chain-attack #service-principal #cloud-backup #mitre-attck
