Cyber Security
Cybersecurity
Binance Loses About $6.3 Billion in Record Crypto Heist
Binance says a compromised DevOps laptop let attackers drain about $6.3 billion in assets, with nearly $3 billion frozen. TRM Labs points to TraderTraitor.
Application Security
Drupal Commerce Core Auth Bypass CVE-2026-118539 Under Attack
Drupal warns attackers are exploiting CVE-2026-118539, a missing-authorization flaw in Commerce Core that allows an access bypass on affected online stores.
Application Security
WordPress 7.1.4 Fixes Core RCE Flaw Attackers Are Probing
Wordfence logged more than 18,500 malicious requests in 21 hours against a WordPress Core upgrade flaw. WordPress 7.1.4 randomizes the staging directory.
CVE Vulnerability Alerts
Cisco Patches Exploited ASA/FTD VPN Zero-Day CVE-2026-76418
Cisco fixed CVE-2026-76418, a zero-day that crashes ASA and FTD SSL VPN devices. CISA added it and a GitLab RCE to KEV with a November ...
Application Security
Polymarket Halts Trading After Hacked DebugBear Script Drains Wallets
Attackers compromised DebugBear's monitoring script to serve crypto-draining code on Polymarket, with about $2.5 million traced as stolen from trader wallets.
Cybersecurity
Cyberattack Knocks Belgium’s MyMinfin Tax Portal Offline
Belgium's FPS Finance confirmed a cyberattack and pulled several digital services offline, including MyMinfin, and pushed one tax filing deadline to November 16.
Application Security
TeamViewer Flaw CVE-2026-111585 Lets Hosts Hijack Technicians
A CVSS 8.8 integer overflow in TeamViewer's viewer lets a malicious remote host crash or run code on a support technician's Windows, macOS, Linux or ...
Application Security
Progress Patches 15 WS_FTP Server Flaws, Including CVSS 10.0 Bug
Progress fixed 15 WS_FTP Server vulnerabilities, led by CVE-2026-84295, a CVSS 10.0 authentication flaw that exposes administrative credentials to attackers.
AI Security
ServiceNow Patches Critical AI Platform Sandbox Escape Flaw
ServiceNow fixed CVE-2026-103093, a critical Rhino sandbox bypass that lets an authenticated admin run code on the host OS, plus two other flaws in KB3228994.
CVE Vulnerability Alerts
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a phone when a user answers ...
AI Security
Researcher Finds 26,400 Live Cloud and AI Keys on Gitee
Researcher Ben Zimmermann scanned 7.25 million public Gitee repositories and found about 26,400 working cloud and AI credentials, led by Alibaba Cloud keys.
AI Security
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more than 32,000 downloads.
AI Security
EMBRACE Flaws in Cursor, Codex, VS Code Allow File Theft
Forever Security's EMBRACE research found embedded-browser flaws in Cursor, Copilot, Codex, VS Code and Claude Desktop; Codex and VS Code remain unpatched.
Application Security
Chrome 156 Update Fixes 21 Flaws, Including Critical MediaStream Bug
Google's Chrome 156 update fixes 21 vulnerabilities, including critical MediaStream memory corruption bug CVE-2026-76024, with no exploitation reported.
Cybersecurity
GM Pays $220 Million to Settle 36-State Driver Data Suit
General Motors agreed to pay $220 million to 36 state attorneys general over the sale of driver location and driving data to brokers that resold ...
CVE Vulnerability Alerts
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
CVE Vulnerability Alerts
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
Cybersecurity
Volt Typhoon’s Silent Train Relay Network Ran Four Zero-Day Attacks
Lumen's Black Lotus Labs says Volt Typhoon used a covert relay network called Silent Train to run four zero-day campaigns against hundreds of victims.
Application Security
Kerio Connect Webmail XSS CVE-2026-112353 Exploited via SVG Files
Proofpoint observed attackers exploiting Kerio Connect webmail flaw CVE-2026-112353 with crafted SVG attachments to steal user credentials and mailbox contents.
Application Security
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen in the wild.
Cybersecurity
Binance Loses About $6.3 Billion in Record Crypto Heist
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Cisco Patches Exploited ASA/FTD VPN Zero-Day CVE-2026-76418
Application Security
Polymarket Halts Trading After Hacked DebugBear Script Drains Wallets
Cybersecurity
Cyberattack Knocks Belgium’s MyMinfin Tax Portal Offline
Application Security
TeamViewer Flaw CVE-2026-111585 Lets Hosts Hijack Technicians
This Week’s Security Spotlight
Cybersecurity
Binance Loses About $6.3 Billion in Record Crypto Heist
Application Security
NVIDIA Patches CVSS 10.0 Authentication Flaw in NeMo Toolkit
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Cisco Patches Exploited ASA/FTD VPN Zero-Day CVE-2026-76418
Cisco fixed CVE-2026-76418, a zero-day that crashes ASA and FTD SSL VPN devices. CISA added it and a GitLab RCE to KEV with a November ...
Polymarket Halts Trading After Hacked DebugBear Script Drains Wallets
Attackers compromised DebugBear's monitoring script to serve crypto-draining code on Polymarket, with about $2.5 million traced as stolen from trader wallets.
Cyberattack Knocks Belgium’s MyMinfin Tax Portal Offline
Belgium's FPS Finance confirmed a cyberattack and pulled several digital services offline, including MyMinfin, and pushed one tax filing deadline to November 16.
TeamViewer Flaw CVE-2026-111585 Lets Hosts Hijack Technicians
A CVSS 8.8 integer overflow in TeamViewer's viewer lets a malicious remote host crash or run code on a support technician's Windows, macOS, Linux or ...
Progress Patches 15 WS_FTP Server Flaws, Including CVSS 10.0 Bug
Progress fixed 15 WS_FTP Server vulnerabilities, led by CVE-2026-84295, a CVSS 10.0 authentication flaw that exposes administrative credentials to attackers.
ServiceNow Patches Critical AI Platform Sandbox Escape Flaw
ServiceNow fixed CVE-2026-103093, a critical Rhino sandbox bypass that lets an authenticated admin run code on the host OS, plus two other flaws in KB3228994.
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a phone when a user answers ...
Researcher Finds 26,400 Live Cloud and AI Keys on Gitee
Researcher Ben Zimmermann scanned 7.25 million public Gitee repositories and found about 26,400 working cloud and AI credentials, led by Alibaba Cloud keys.
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more than 32,000 downloads.
EMBRACE Flaws in Cursor, Codex, VS Code Allow File Theft
Forever Security's EMBRACE research found embedded-browser flaws in Cursor, Copilot, Codex, VS Code and Claude Desktop; Codex and VS Code remain unpatched.
Chrome 156 Update Fixes 21 Flaws, Including Critical MediaStream Bug
Google's Chrome 156 update fixes 21 vulnerabilities, including critical MediaStream memory corruption bug CVE-2026-76024, with no exploitation reported.
GM Pays $220 Million to Settle 36-State Driver Data Suit
General Motors agreed to pay $220 million to 36 state attorneys general over the sale of driver location and driving data to brokers that resold ...
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
Volt Typhoon’s Silent Train Relay Network Ran Four Zero-Day Attacks
Lumen's Black Lotus Labs says Volt Typhoon used a covert relay network called Silent Train to run four zero-day campaigns against hundreds of victims.
Kerio Connect Webmail XSS CVE-2026-112353 Exploited via SVG Files
Proofpoint observed attackers exploiting Kerio Connect webmail flaw CVE-2026-112353 with crafted SVG attachments to steal user credentials and mailbox contents.
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen in the wild.
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Apache Kafka JWT Bypass CVE-2026-110985 Among 12 Fixed Flaws
Apache Kafka fixed 12 vulnerabilities, including CVE-2026-110985, a JWT validation bypass that lets unauthenticated attackers forge tokens for any user.
Yoba Campaign Hides XMRig Miner Behind Signed ChatGPT, Claude Files
Check Point says the Yoba campaign used fake GitHub pages for nonexistent AI apps to deliver an XMRig miner through signed OpenAI and Anthropic executables.