Apple issued an App Store Connect update with release notes published on its developer site.
Apple announced an update to App Store Connect, its developer tool for managing App Store submissions. No security fixes, CVEs, or notable changes were described in the announcement.
Apple issued an App Store Connect update on September 9, 2026, with release notes published on its developer site.
Apple published an update to App Store Connect on September 9, 2026, announced via its developer news releases page. The notice links to release notes but does not describe specific changes. No vulnerabilities, CVEs, or security fixes are mentioned in the provided content.
Microsoft released a Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework mapping threats to cloud-hosted web apps and serverless platforms.
Microsoft introduced the cloud web applications threat matrix, which organizes attack techniques for cloud-hosted web apps and serverless platforms using MITRE ATT&CK tactics, from resource development through impact. The framework covers attack paths spanning application code, managed runtimes, workload identities, and deployment pipelines, cataloging techniques such as subdomain takeover, code injection in connected repositories, compromised registry images, exposed admin interfaces, and serverless trigger injection. It builds on Microsoft's earlier Kubernetes and storage services matrices to help defenders identify visibility gaps, prioritize hardening, and plan investigations in cloud-native environments.
Researchers found LG smart TVs collect network data and ACR viewing profiles, and demonstrated microphone audio capture plus undisclosed RCE vulnerabilities.
An investigation by Gamers Nexus with Level1Techs and independent researchers found LG TVs performing network discovery, collecting nearby Wi-Fi names and device identifiers, and conducting Automated Content Recognition (ACR) tracking. They demonstrated microphone audio capture even when the TV appeared off, and audio buffering while the TV was unplugged from the internet. Remote-code-execution vulnerabilities were reported to LG under ongoing responsible disclosure, with full details not yet public.