Top stories.
- Patch Tuesday notes.
- China tells domestic companies to stop using US- and Israeli-made cybersecurity software.
- Spanish police arrest dozens of alleged Black Axe members.
Patch Tuesday notes.
Microsoft yesterday issued patches for 114 vulnerabilities, including three zero-days, BleepingComputer reports. One of the zero-days is actively exploited, while two are publicly disclosed. The actively exploited vulnerability (CVE-2026-20805) is an information disclosure flaw in the Desktop Windows Manager. One of the publicly disclosed flaws (CVE-2023-31096) is a privilege escalation bug in Agere Soft Modem drivers, while the other (CVE-2026-21265) is a security feature bypass vulnerability related to expiring Secure Boot certificates.
Adobe released fixes for 25 vulnerabilities across multiple products, including a critical Apache Tika flaw in ColdFusion that could be exploited via XFA files inside PDF documents, SecurityWeek reports.
Fortinet patched six vulnerabilities in its products, including two critical flaws in FortiFone and FortiSIEM. Horizon3.ai published a report on the more severe of these bugs, a command injection flaw tracked as CVE-2025-64155.
China tells domestic companies to stop using US- and Israeli-made cybersecurity software.
Reuters reports that Beijing has told Chinese companies to cease using cybersecurity software from about a dozen US and Israeli firms due to national security concerns. The banned security providers include VMware, Palo Alto Networks, Fortinet, and Check Point. Sources told Reuters that Beijing is concerned that the software could be used for espionage. The Chinese government hasn't responded to Reuters's request for a comment.
Reuters notes, "Fortinet has three offices in mainland China and one in Hong Kong, according to its website. Check Point’s website lists support addresses in Shanghai and Hong Kong. Broadcom lists six China locations, while Palo Alto lists five local offices in China, including one in Macau."
Spanish police arrest dozens of alleged Black Axe members.
The Spanish National Police, supported by Europol and the Bavarian State Criminal Police Office, have arrested 34 individuals accused of association with the Black Axe criminal gang, CyberScoop reports. According to Europol, Black Axe is a Nigerian organization with a global presence, known for conducting "cyber-enabled fraud, drug trafficking, human trafficking and prostitution, kidnapping, armed robbery, and fraudulent spiritual practices." Authorities believe this Spain-based contingent was responsible for scams and fraud leading to losses of nearly six million euros.
