CVE-2026-69525Patch(microsoft / windows_10_1607)

عزیزان سرورهای ویندوزی‌تون رو آپدیت کنید کریتیکال ۹.۸ 🥺 https://nvd.nist.gov/vuln/detail/cve-2026-69525

🔒 CYBERSECURITY, PRIVACY & OPEN SOURCE ROUNDUP — September 26, 2026 1️⃣ ORACLE PEOPLESOFT UNDER ACTIVE WILD EXPLOITATION A critical PeopleSoft flaw, CVE-2026-35273 (CVSS 9.8), is reportedly under mass exploitation by a threat cluster tracked as UNC6240. The reported technique is an elegant WAF bypass: attackers URL-encode a single path character (/%50SEMHUB/ instead of /PSEMHUB/) to slip past string-matching rules, then drop web shells for unauthenticated remote code execution. If your PeopleSoft sits behind a literal-path WAF, the protection may be weaker than it looks. 🔹 @XavierRiveraX 2️⃣ IOS 27 CREDITS AI BUG FINDERS A sign of the times in Apple's security notes: three of the iOS 27 fixes are credited to Anthropic's Claude, and OpenAI Codex Security is thanked as well. AI models are now formal contributors to mobile OS security, listed right alongside human researchers. 🔹 @mnh_18 3️⃣ WINDOWS REMOTE DESKTOP RCE ADDRESSED IN SEPTEMBER UPDATE Microsoft's September security cycle addresses a critical Remote Desktop flaw, CVE-2026-69525, rated CVSS 9.8. Security notes flag the issue as urgent, and unpatched RDS servers should be treated as top priority. 🔹 @Teeeda_worker 4️⃣ ABOUT 160 TEAMCITY SERVERS STILL EXPOSED Roughly 160 TeamCity servers remain exposed to the internet, and CISA has just labeled the flaw "used in ransomware." Continuous deployment servers stay a persistent target because they can move code and credentials inside an organization. 🔹 @Boluyung 5️⃣ AI FOUND 23,000 FLAWS ACROSS OPEN SOURCE PROJECTS Chainguard highlighted that Anthropic's newest AI found 23,019 potential vulnerabilities across 1,000+ open source projects. Of the 1,596 disclosed to maintainers, only 97 are known to be patched. The gap between AI discovery speed and human patching speed is becoming a structural problem for open source security. 🔹 @StartupContext 6️⃣ FLOCK SAFETY FACES 300,000 DEVICE SURVEILLANCE MAP A public map created by cybersecurity researcher Joshua Michael reportedly identifies roughly 300,000 devices tied to Flock Safety across the country, and the company is reportedly trying to pull it offline. The map shows how the cross-jurisdiction license plate recognition network can be used to reconstruct past movements across state lines. 🔹 @gatewaypundit 7️⃣ RSA 1024 SIGNATURES FORGED WITHOUT FACTORIZATION New research reportedly demonstrates that 1024-bit RSA signatures can be forged without factoring the modulus — the published analysis cites roughly 1,380 core-years of compute. For the few remaining use cases still relying on RSA-1024, the security margin is shrinking. 🔹 @__canal 8️⃣ ONEPLUS 15 ZERO PERMISSION ROOT EXPLOIT A malicious Android app can reportedly gain full root access on a stock OnePlus 15 without requesting a single permission — no camera, no SMS, no accessibility abuse. Another reminder that a stock OS is not a guarantee of containment. 🔹 @thecybersecguru 💭 The common thread today is the shrinking time between discovery and exploitation. An AI that scans 1,000 projects faster than maintainers can patch them, a WAF defeated by one encoded character, and 160 build servers left open to the internet all point the same direction: the comfortable window where something is patched but nobody has updated yet is closing. If you run PeopleSoft, Remote Desktop, or TeamCity, the September patch is not optional. Are you tracking AI-found vulnerabilities in your own stack? What is your patch SLA for criticals? 👇 #CyberSecurity #Privacy #OpenSource

【緊急】Windows RDSにCVSS 9.8、9月更新を適用 https://www.cybernote.click/2026/09/25/windows-remote-desktop-cve-2026-69525-rce-update/ #IT #Security #cybersecurity

【緊急】Windows RDSにCVSS 9.8、9月更新を適用 https://www.cybernote.click/2026/09/25/windows-remote-desktop-cve-2026-69525-rce-update/ #IT #Security #cybersecurity

【緊急】Windows RDSにCVSS 9.8、9月更新を適用 https://www.cybernote.click/2026/09/25/windows-remote-desktop-cve-2026-69525-rce-update/ #IT #Security #cybersecurity