NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

The Hacker News - Oct 15, 2026

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit. A fourth lets an attacker forge a TLS session that could

Read full article

More News

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules

Oct 15, 2026

Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several exploit paths exist through contributed modules, and at least one known path needs no login.

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

Oct 15, 2026

Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026.  The campaigns also increase operational pressure on MSSPs serving US businesses, which accounted for 16% of country-attributed targets.  Similar attacks

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Oct 15, 2026

Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS software enables an

AI giant Anthropic woos potential investors ahead of stock market debut

AI giant Anthropic woos potential investors ahead of stock market debut

Oct 15, 2026

It comes as some investors have become concerned about the amount of money being spent on AI infrastructure.

OnePlus Ace 7 may launch in India as OnePlus 16R with built-in cooling fan, 9,000mAh battery

OnePlus Ace 7 may launch in India as OnePlus 16R with built-in cooling fan, 9,000mAh battery

Oct 15, 2026

OnePlus Ace 7 is tipped to feature a built-in cooling fan, a 185Hz OLED display and a 9,000mAh battery aimed at gaming enthusiasts. The smartphone could run on the Snapdragon 8 Elite Gen 5 chipset and feature a 200MP primary camera, with up to 16GB of RAM.

Why AI Confidence Is Not Validation

Why AI Confidence Is Not Validation

Oct 15, 2026

AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing reliable ways to verify it. Without governance models and validation standards in place, that gap compounds and rarely stays contained to a workstation: an

Families of Sailors Killed in Gulf Struggle for Compensation and Closure

Families of Sailors Killed in Gulf Struggle for Compensation and Closure

Oct 15, 2026

Attacks near the Strait of Hormuz have claimed the lives of at least 25 seafarers. Their survivors are reeling.

Exhausted Parents Are Turning to A.I. Apps Despite the Risks

Exhausted Parents Are Turning to A.I. Apps Despite the Risks

Oct 15, 2026

Even as alarm grows over the risks, families are embracing bots and agents to tackle the spiraling administrative tasks of modern child rearing.

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

Oct 15, 2026

The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify calls from unknown numbers and tackle spam or fraudulent calls. To that end, the Department of Telecommunications has issued a circular urging service

Tech Stocks Plunge as Doubts Over A.I. Spending Intensify

Tech Stocks Plunge as Doubts Over A.I. Spending Intensify

Oct 15, 2026

Tech stocks plunged, led by a steep drop in South Korea’s benchmark index, as concerns over soaring A.I. spending and stubborn inflation fueled a sell-off.

Z.ai’s GLM-5.3 raises researcher fears the Chinese model can fake AI safety tests

Z.ai’s GLM-5.3 raises researcher fears the Chinese model can fake AI safety tests

Oct 15, 2026

Chinese artificial intelligence lab Z.ai’s latest flagship model, GLM-5.3, may be sophisticated enough to “fake” its way through safety tests, according to a new report published Thursday, sparking new fears about the ability of artificial intelligence systems to shape their own development. The model, launched in August, showed an ability to consider how its behaviour during safety evaluations might influence how future versions of itself would be trained, according to AI safety organisation...

Climate change is weakening Santa Ana winds — but won't save SoCal from devastating fires

Climate change is weakening Santa Ana winds — but won't save SoCal from devastating fires

Oct 15, 2026

Scientist have projected for years that climate change would lead to fewer Santa Anas by the end of the century. A new UCLA paper shows it's already happening.

Recommended

24-7 Reporters

24-7 Reporters publishes up-to-the-minute news 24 hours a day, 7 days a week. Our certified reporters are among the most experienced, well-trained and talented across the globe, covering issues resonating progressives in every corner of the world.

ABOUT US
Sign Up

Copyright © 2015 - 2026 24-7 Reporters. All Rights Reserved.