Security Updates
Latest Threat Alerts
Live FeedCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of th…
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, accordi…
OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making req…
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The f…
Critical vulnerabilities in PHP
A security release for two critical PHP vulnerabilities is set for public disclosure on 22 October 2026. PHP is widely used to power web applications.
Protecting operational technology and edge devices
Alert on the cyber security risks to operational technology (OT), including refrigeration and cooling technology, with mitigation advice and guidance for bus…
ASD Essentials: evolving our approach to cyber security resilience
Building on the Essential Eight, the ASD Essentials provides practical, threat-informed guidance to help organisations strengthen cyber resilience across mod…
Critical vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway products
Alert for organisations to implement a high-priority patch addressing new vulnerabilities, under active exploitation in Citrix NetScaler ADC and Citrix NetSc…
About this feed. These alerts are gathered automatically from public sources and updated hourly, and are provided as general information only. We make no warranty, express or implied, as to their accuracy or completeness, and nothing here is professional or security advice. Each headline links to the original report and all content remains the property of its source. Alerts and advisories from the Australian Signals Directorate are © Commonwealth of Australia, reused under a Creative Commons Attribution 4.0 International licence. The sources shown are independent, and their inclusion here does not imply they endorse this feed or our services.