Meta has sold millions of smart glasses, but the one complaint kept coming up louder than all the others: the camera. On October 13, 2026, Meta finally removed it. The Ray-Ban Meta Audio glasses, which went on sale in the US this week starting at $349, are Meta’s first camera-free smart glasses — open-ear audio,…
Direct answer SAP CVE-2026-89111 is a maximum-severity OAuth2 server-side request forgery (SSRF) flaw in the SAP Cloud SDK for Python, rated CVSS 10.0. It affects multi-tenant applications built on SAP Business Technology Platform (BTP) that use Cloud SDK for Python versions before 0.45.2. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests…
Short answer: update both browsers today If you use Google Chrome or Mozilla Firefox, update them now. On October 13, 2026, Google and Mozilla shipped security updates that fix a combined 114 vulnerabilities: 37 in Chrome 155 and 77 in Firefox 158. Seven of the Chrome flaws are rated critical, and 30 of the Firefox…
What Happened on October 13 Microsoft released its October 2026 Patch Tuesday updates on October 13, 2026, and the size of the release broke every previous record. By BleepingComputer’s count, the updates fixed 1,411 vulnerabilities, including one actively exploited zero-day and two publicly disclosed zero-days. The total covers only flaws released on Patch Tuesday itself….
On October 13, 2026, Ivanti disclosed an actively exploited zero-day vulnerability in its Connect Secure VPN appliances and urged customers to patch immediately. The flaw, tracked as CVE-2026-104935, lets a remote attacker bypass authentication and run arbitrary commands on the appliance without logging in. Worse, researchers at Volexity found an unknown threat actor chaining it…
Progress Software has disclosed 31 new security vulnerabilities in MarkLogic Server, its flagship enterprise database platform, including five flaws rated critical. The most serious ones let users with only limited, delegated privileges climb all the way to full administrative control of the server. Patches have existed since September 10 in MarkLogic 11.3.7 and 12.1.0, but…
The short version: Apple has announced HomeView, its first dedicated smart home hub, priced at $299 in the US. Pre-orders opened on October 13, 2026, and the device starts shipping on November 13. It centers on a 7-inch square touchscreen with a brand new conversational Siri AI, and it comes in two versions: a tabletop…
A public exploit is now circulating for a critical vulnerability in AnyDesk for Linux that lets an attacker run commands as root on a remote machine before the user ever approves the session. The flaw, tracked as CVE-2026-109390 and dubbed AnyPwn by the researchers who found it, carries a CVSS score of 9.8 out of…
The short answer: Overnight on October 11-12, 2026, attackers seized remote control of Danfoss refrigeration controllers in roughly 500 French supermarkets and forced the systems into continuous defrost mode at 50°C (122°F), spoiling fresh and frozen food worth millions of euros. Paris prosecutors and the national cybersecurity agency ANSSI are investigating; no group has claimed…
The short answer If your WordPress site uses the Bricksforge plugin, update it today. A maximum-severity vulnerability, tracked as CVE-2026-85097, lets attackers take over a vulnerable site without logging in. Attackers started exploiting it within hours of its discovery, and every internet-connected site running an affected version is a target. The fix is simple: update…