This week in security: Windows zero-days, Flax Typhoon, Oracle Health breach
Weekly security digest for 2026-W41: Windows zero-days, the Flax Typhoon seizure, 8 new CISA KEV entries and what to patch before the 11 October deadline.
-
-
Strapi CVE-2023-22894 data exposure flaw added to CISA KEV catalog
CISA says Strapi flaw CVE-2023-22894 is exploited. Check your version, upgrade past 4.8.0 and review admin access before the 11 October 2026 federal due date.
End of content
End of content