A vulnerability has been reported in Mozilla Firefox, which could allow a remote attacker to execute arbitrary code on a targeted system.

Software Affected:

Mozilla Firefox version before 144.0.2

https://www.mozilla.org/en-US/security/advisories/mfsa2025-86/

A vulnerability has been reported in Microsoft Edge (Chromium-based), which could allow a remote attacker to execute arbitrary code on a targeted system.

Software Affected:

Microsoft Edge (Chromium-based) version before 141.0.3537.85

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#october-17-2025

Multiple vulnerabilities have been reported in Microsoft Products, which could allow an attacker to gain elevated privileges, obtain Information Disclosure, Bypass Security restrictions, conduct remote code execution attacks, perform spoofing attacks, cause a denial of service condition, or tamper with system settings.

Software Affected:

Open Source Software

Apps

Windows

Developer Tools

Microsoft Office

Server Software

System Center

https://msrc.microsoft.com/update-guide/releaseNote/2025-Oct

Multiple vulnerabilities have been reported in Apple Products, which could allow an attacker to execute arbitrary code, gain elevated privileges, disclose sensitive information, bypass security restrictions, or cause a denial of service condition on the targeted system.

Software Affected:

Apple iOS and iPadOS versions before 26, 18.7, 16.7.12, 15.8.5

Apple macOS Tahoe versions before 26

Apple macOS Sequoia versions before 15.7

Apple macOS Sonoma versions before 14.8

Apple TVOS versions before 26

Apple watchOS versions before 26

Apple visionOS versions before 26

Apple Satani versions before 26

Apple Xcode versions before 26

https://support.apple.com/en-us/125108

https://support.apple.com/en-us/125109
https://support.apple.com/en-us/125141
https://support.apple.com/en-us/125142
https://support.apple.com/en-us/125110
https://support.apple.com/en-us/125111
https://support.apple.com/en-us/125112
https://support.apple.com/en-us/125114
https://support.apple.com/en-us/125116
https://support.apple.com/en-us/125115
https://support.apple.com/en-us/125113
https://support.apple.com/en-us/125117

Multiple vulnerabilities have been reported in Microsoft products, which could allow an attacker to bypass security restrictions, gain elevated privileges, obtain sensitive information, and conduct remote code execution, spoofing attacks, or cause a Denial of Service (DoS) condition on the targeted system.

Software Affected:

 Microsoft Auto Update for Mac

 Microsoft Windows

 Microsoft Office

 Microsoft 365 Apps

 Microsoft Edge (Chromium-based)

https://msrc.microsoft.com/update-guide/releaseNote/2025-Sep

Multiple vulnerabilities were reported in Google Chrome for Desktop, allowing remote attackers to execute arbitrary code or disclose sensitive information.

Software Affected:

Google Chrome versions before 141.0.7390.107/.108 for Windows and Mac

Google Chrome versions before 141.0.7390.107 for Linux

https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_14.html

Multiple vulnerabilities were reported in Mozilla products, allowing remote code execution or disclosure of sensitive information.

Software Affected:

Mozilla Firefox for iOS versions before 143.1

Mozilla Firefox versions before 143.0.3

MFSA 2025-79MFSA 2025-80

Multiple vulnerabilities in Microsoft Edge (Chromium-based) could allow remote attackers to obtain sensitive information and execute arbitrary code.

Software Affected:

Microsoft Edge (Chromium-based) versions before 140.0.7339.208

Microsoft Edge Security Release Notes (Sep 25, 2025)

Multiple vulnerabilities could allow a remote attacker to execute arbitrary code, cause denial of service (DoS), or disclose information.

Software Affected:

Google Chrome versions before 140.0.7339.207/.208 for Windows/Mac

Google Chrome versions before 140.0.7339.207 for Linux

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html

A vulnerability has been reported in Apple products, which could be exploited by an attacker to cause denial of service conditions or corrupt process memory on the targeted system. Multiple affected releases are listed below.

Software Affected:

Apple iOS / iPadOS versions before 18.7.1

Apple iOS / iPadOS versions before 26.0.1

Apple macOS Tahoe versions before 26.0.1

Apple macOS Sequoia versions before 15.7.1

Apple macOS Sonoma versions before 14.8.1

Apple visionOS versions before 26.0.1

https://support.apple.com/en-us/125326

https://support.apple.com/en-us/125327

https://support.apple.com/en-us/125328

https://support.apple.com/en-us/125329

https://support.apple.com/en-us/125330

https://support.apple.com/en-us/125338

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Google Chrome versions before 140.0.7339.127/.128 for Windows

Google Chrome versions before 140.0.7339.132/.133 for Mac

Google Chrome versions before 140.0.7339.127 for Linux

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_9.html

Software Affected:

WhatsApp for iOS version before 2.25.21.73

WhatsApp Business for iOS version 2.25.21.78

WhatsApp for Mac version 2.25.21.78

Recently, several media outlets reported the exposure of approximately 16 billion login credentials, including usernames, passwords, authentication tokens, and associated metadata, from platforms such as Apple, Google, Facebook, Telegram, GitHub, and various virtual private network (VPN) services.

Recommendations to mitigate risks

Update Passwords Immediately: Change passwords for all affected services, prioritizing email, banking, social media, and government portals. Create strong, unique passwords (minimum 12 characters, including letters, numbers, and symbols). Avoid reusing passwords across services to prevent credential stuffing attacks. Make it a habit to change your passwords regularly.

Enable Multi-Factor Authentication (MFA): Activate MFA on all accounts that support it, using authenticator apps, hardware tokens, or SMS-based verification.

Transition to Passkeys: Where supported (e.g., Apple, Google), enable passkeys for password-less, phishing-resistant authentication using biometrics or device PINs.

Protect Against Malware: Run antivirus scans to detect and remove infostealer malware. Ensure operating systems, browsers, and applications are updated to address known vulnerabilities.