Security Affairs reports Apple has rolled out iPadOS 15.8.7 and iOS 16.7.15 to patch vulnerabilities linked to the Coruna exploits and protect older iPad and iPhone devices that can no longer update to the latest iOS versions.
The hotpatch feature, which allows security updates to be installed and take effect without a restart, will become the default for devices meeting specific prerequisites, including those running Windows 11 version 24H2 or later and having the April 2026 security update installed.
The vulnerabilities, including three RCE flaws (CVE-2026-21666, CVE-2026-21667, and CVE-2026-21669) and one allowing execution as the postgres user (CVE-2026-21708), enable low-privileged users to execute remote code on vulnerable servers with low complexity.
Security researchers at Tenable identified the nine flaws, which impact users of various Looker Studio data connectors, including Google Sheets and PostgreSQL.
Widely used WordPress plugin Ally, which focuses on website usability and accessibility, has been impacted by a high-severity security vulnerability, which could be harnessed to compromise sensitive information without authentication, reports BleepingComputer.
Updates have been issued by Microsoft to address 83 vulnerabilities across its products, including a critical remote code execution vulnerability and two publicly disclosed flaws, as part of this month's Patch Tuesday, SecurityWeek reports.
CyberScoop reports that widely used Java security library pac4j was noted by CodeAnt AI co-founder and CEO Amartya Jha to be impacted by a maximum severity flaw, which could be weaponized by anyone with basic knowledge of JSON Web Tokens.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
