CyberThreats.au: security alerts and updates https://cyberthreats.au/news/ Scam warnings, cyber security alerts and security updates from official sources, explained in plain English. en-au Google moves Chrome 156 to the Stable channel for Windows, Mac and Linuxhttps://cyberthreats.au/news/2026-10-22-chrome-156-stable-desktop/https://cyberthreats.au/news/2026-10-22-chrome-156-stable-desktop/Thu, 22 Oct 2026 00:00:00 GMTGoogle announced on 20 October 2026 that Chrome 156 is being promoted to the Stable channel for desktop computers, a week after the Chrome 155 release. PHP fixes two critical flaws that can let attackers take over websiteshttps://cyberthreats.au/news/2026-10-22-php-critical-vulnerabilities-update/https://cyberthreats.au/news/2026-10-22-php-critical-vulnerabilities-update/Thu, 22 Oct 2026 00:00:00 GMTPHP has released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical remote code execution flaws. The ACSC has also issued an alert. WA Cyber Security Unit flags an actively exploited Windows vulnerability fixed by Microsofthttps://cyberthreats.au/news/2026-10-22-wa-advisory-exploited-windows-vulnerability/https://cyberthreats.au/news/2026-10-22-wa-advisory-exploited-windows-vulnerability/Thu, 22 Oct 2026 00:00:00 GMTA WA Government advisory says Microsoft has released updates for CVE-2026-96951, a Windows flaw that Microsoft says has been exploited. Google publishes October 2026 Android security bulletin, with Pixel updates at the 2026-10-05 patch levelhttps://cyberthreats.au/news/2026-10-21-android-october-2026-security-bulletin/https://cyberthreats.au/news/2026-10-21-android-october-2026-security-bulletin/Wed, 21 Oct 2026 00:00:00 GMTGoogle's October 2026 Android bulletin lists fixes addressed by the 2026-10-01 security patch level, including critical System issues. Pixel phones get 2026-10-05. Apple fixes a CoreGraphics flaw it says may have been exploited, in iOS 26.7.1 and macOS 26.7.1https://cyberthreats.au/news/2026-10-21-apple-ios-26-7-1-macos-26-7-1-exploited-flaw/https://cyberthreats.au/news/2026-10-21-apple-ios-26-7-1-macos-26-7-1-exploited-flaw/Wed, 21 Oct 2026 00:00:00 GMTApple has released iOS 26.7.1, iPadOS 26.7.1 and macOS Tahoe 26.7.1 to fix a file-processing flaw it says may have been used in targeted attacks. ATO warns fake "payment update" emails can install remote access softwarehttps://cyberthreats.au/news/2026-10-21-ato-fake-payment-update-email-remote-access/https://cyberthreats.au/news/2026-10-21-ato-fake-payment-update-email-remote-access/Wed, 21 Oct 2026 00:00:00 GMTThe ATO says scam emails about a payment update or income statement link to remote desktop software that could let scammers into your device. Here's what it lists. Google releases Chrome 155 for desktop with 37 security fixeshttps://cyberthreats.au/news/2026-10-21-chrome-155-security-update/https://cyberthreats.au/news/2026-10-21-chrome-155-security-update/Wed, 21 Oct 2026 00:00:00 GMTGoogle says Chrome 155 for Windows, Mac and Linux includes 37 security fixes. The update rolls out over the coming days and weeks. Microsoft Entra is retiring its built-in SMS and voice sign-in codes and making passkeys the defaulthttps://cyberthreats.au/news/2026-10-21-entra-passkeys-default-sms-voice-retirement/https://cyberthreats.au/news/2026-10-21-entra-passkeys-default-sms-voice-retirement/Wed, 21 Oct 2026 00:00:00 GMTMicrosoft says Entra ID is moving to passkeys by default and retiring Microsoft-provided SMS and voice authentication in stages from February 2027. Microsoft releases October 2026 security update for Exchange Server Subscription Editionhttps://cyberthreats.au/news/2026-10-21-exchange-server-se-october-2026-security-update/https://cyberthreats.au/news/2026-10-21-exchange-server-se-october-2026-security-update/Wed, 21 Oct 2026 00:00:00 GMTMicrosoft's 13 October 2026 update KB5128895 for Exchange Server SE fixes six vulnerabilities, including one remote code execution flaw. Scamwatch warns investment scams can start in chat groups, referrals and fake news storieshttps://cyberthreats.au/news/2026-10-21-scamwatch-investment-scams-hiding-in-plain-sight/https://cyberthreats.au/news/2026-10-21-scamwatch-investment-scams-hiding-in-plain-sight/Wed, 21 Oct 2026 00:00:00 GMTScamwatch says some investment scams begin without an obvious sales pitch, through group chats, trusted referrals or fake news articles. Here are the signs it lists. Microsoft releases October 2026 Windows 11 security update, the last for 24H2 Home and Prohttps://cyberthreats.au/news/2026-10-21-windows-11-october-2026-security-update/https://cyberthreats.au/news/2026-10-21-windows-11-october-2026-security-update/Wed, 21 Oct 2026 00:00:00 GMTMicrosoft's 13 October 2026 update KB5127648 brings security fixes to Windows 11 24H2, 25H2 and 26H2, and is the final update for 24H2 Home and Pro editions.