Apple released updates for iOS/iPadOS, macOS, and Safari on Monday. There have been no updates for other Apple operating systems (visionOS, watchOS, tvOS). Usually, Apple updates all products at the same time.

Apple issued software updates on Monday for its iOS/iPadOS and macOS operating systems, along with a refresh for its Safari web browser. These releases mark the latest security and feature patches from the technology giant.
Notably absent from this round of updates were releases for Apple's visionOS, watchOS, and tvOS platforms. Typically, Apple endeavors to provide simultaneous updates across its entire product ecosystem, making the selective release on this occasion somewhat unusual.
The specific details regarding the security vulnerabilities addressed or new features introduced in the iOS/iPadOS, macOS, and Safari updates were not immediately available. Apple generally provides detailed release notes for each update, outlining the changes and fixes.
Users of iPhones, iPads, and Macs are advised to check for and install the latest available software to benefit from any security enhancements and improvements. Keeping operating systems and applications up-to-date is a fundamental practice for maintaining device security and stability.
The absence of updates for visionOS, watchOS, and tvOS suggests that either these platforms did not require immediate patching or that their update cycles may differ. Further information is expected to be released by Apple, potentially clarifying the scope of these updates and any future plans for the other operating systems.

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the flaw and named it StyleSmuggler, said attacks started on September 4. "Sansec is publishing early

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately revoke or rotate all credentials and secrets that may have been used to run their Cadence executions," JetBrains said.
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be initiated remotely.
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely.

OpenAI has announced a $1 billion commitment to provide subsidized access to its Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders. The initiative, named Daybreak for Frontline Defenders, will offer AI models, training, and technical support over the next six months, prioritizing water and wastewater utilities, electric grid operators, and local government entities. This move aims to equip organizations with limited budgets and staff against increasingly sophisticated cyber threats.
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.