Latest cybersecurity reporting from selected sources.

Opera GX flaw let sites automatically install mods to steal data from other pages, now patched

OpenAI expanded Daybreak with a full GPT-5.5-Cyber release to help defenders patch software flaws

The flaw, CVE-2026-11645, can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page

The emergence of AI models capable to autonomously find and fix vulnerabilities at scale is having a significant impact on patching management, experts say

CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines

Microsoft has patched 120 vulnerabilities in this month’s security update round

Apple patches iOS flaw that retained deleted notifications, exposing message data

Microsoft has patched two zero-day flaws and over 160 others

CISA added CVE-2026-20131 to its KEV catalog as it is being used in ransomware campaigns

March Patch Tuesday sees Microsoft release updates for 79 flaws

Two of the 48 Cisco vulnerabilities, affecting Secure Firewall Management Center, are maximum-severity flaws

Security flaw in RealHomes CRM plugin allowed file uploads; patches released for 30,000+ sites

A high-severity security flaw in the Gogs Git service is being actively exploited, leading to remote code execution

Google said it found indications that two newly identified vulnerabilities affecting Android “may be under limited, targeted exploitation”

The US cybersecurity agency has added the critical flaw to its Known Exploited Vulnerabilities list

Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud researchers

Patches for the targeted vulnerabilities were released in Oracle’s July 2025 security update

Broadcom has released security patches for critical flaws affecting several VMware products

The vulnerability, dubbed SessionReaper, allows customer account takeover and unauthenticated remote code execution

WhatsApp has fixed a zero-day vulnerability linked to a sophisticated cyber-attack