Cyber Security
CVE Vulnerability Alerts
PHP2Shell Attacks on Check Point Gateways Deploy TSGA, ESXi Wiper
Attackers chained PHP2Shell flaws with a new Gaia OS root bug, CVE-2026-123039, to install the TSGA backdoor on Check Point gateways and wipe ESXi hosts.
Application Security
N-able N-central Zero-Days Exploited Hours After PoC Release
Attackers hijacked at least 21 N-able N-central servers within hours of a PoC release for 4EverAble2Shell and Agent2Shell, including 19 with Hotfix 2 applied.
Cybersecurity
Operation Endgame Seizes 235 Servers Tied to Gootloader, StealC
Europol-led Operation Endgame seized 235 servers and 257 domains tied to Gootloader, CastleRAT and StealC, exposing 6.4 million stolen credential datasets.
Cybersecurity
DOJ Seizes $1.2B of North Korea’s Binance Haul, Disrupts FaceStealer
The DOJ obtained authority to seize over $1.2 billion of the roughly $6.3 billion stolen from Binance, while the FBI disrupted North Korea's FaceStealer scheme.
Cybersecurity
TSMC Confirms Employee Data Leak Traced to Third-Party Cloud Vendor
TSMC confirmed some current and former employee data appeared online without authorization via a cloud provider, and found no breach of its own systems.
CVE Vulnerability Alerts
Citrix Patches 28 NetScaler Flaws and Critical Console Auth Bypass
Citrix fixed 31 CVEs across four bulletins, including 28 NetScaler ADC and Gateway memory flaws and a CVSS 9.4 NetScaler Console authentication bypass.
Cybersecurity
Apify Rotates API Tokens and Urges 2FA Resets After Breach
Apify rotated API tokens and proxy passwords and reset all sessions after an intruder reached internal systems on November 9 and 10, with 2FA exposure ...
CVE Vulnerability Alerts
PostgreSQL Fixes 52 Vulnerabilities and Ends Support for Version 14
PostgreSQL releases 18.7, 17.12, 16.16, 15.20 and 14.25 fix 52 security flaws, the largest batch on record, and 14.25 is the final version 14 release.
Application Security
PTC Patches Critical Windchill and FlexPLM Flaw CVE-2026-126325
PTC fixed CVE-2026-126325, a CVSS 9.2 deserialization flaw in Windchill and FlexPLM that allows remote code execution; self-hosted customers must patch.
Application Security
Zoho Publishes Eight Critical ManageEngine CVEs, One Rated 9.9
Zoho disclosed eight critical ManageEngine flaws, led by CVE-2026-12591, a CVSS 9.9 privilege escalation in M365 Manager Plus, plus bugs in DDI Central.
CVE Vulnerability Alerts
Mitel Fixes Critical MiVoice MX-ONE Authentication Bypass Flaw
Mitel issued hotfixes for three MiVoice MX-ONE flaws, including a CVSS 9.4 authentication bypass that lets a LAN attacker log in as admin and alter ...
CVE Vulnerability Alerts
Google Cloud Warns of AMD Turin CPU Flaws Leaking Data in VMs
Google Cloud says three Transient Scheduler Attack flaws affect AMD EPYC Turin CPUs and can leak data between processes inside a VM, rated Medium severity.
Application Security
Red Hat Publishes 21 CVEs, Led by CVSS 9.6 Satellite Sandbox Bypass
Red Hat disclosed 21 CVEs, led by CVE-2026-107360, a CVSS 9.6 sandbox bypass in Satellite's rubygem-safemode that lets template editors call blocked methods.
Cybersecurity
School Bomb-Threat Emails Trace to Addresses in Stolen Credential Data
Bomb-threat emails hit about 6,000 Italian schools and hundreds in Northern Ireland; Hudson Rock found two linked sender addresses in infostealer data.
Cybersecurity
Maersk Confirms Data Theft as WhiteArmor Demands $5 Million
Maersk confirmed unauthorized access to a legacy system from an acquisition, while the WhiteArmor ransomware group claims 100 GB of stolen logistics data.
Cybersecurity
Attackers Hijack ScreenConnect at MSPs as ConnectWise Cuts Extensions
Huntress says attackers abused ScreenConnect Run Command at MSPs to push rogue clients and the SCKit toolkit; ConnectWise disabled five extensions at partners.
Application Security
wfx-loot Campaign Used 4,837 Hijacked GitHub Accounts for CI Stealer
Aikido Security says the wfx-loot campaign used 4,837 stolen GitHub accounts to plant a CI secret stealer that ran in at least 1,806 repositories so ...
Application Security
Apache 2.4.71 Fixes Critical mod_http2 RCE Flaw CVE-2026-119618
Apache HTTP Server 2.4.71 fixes CVE-2026-119618, a critical mod_http2 race condition rated CVSS 9.8 by Red Hat; Red Hat and Wiz disagree on exploit status.
CVE Vulnerability Alerts
Critical MongoDB Flaw CVE-2026-118383 Crashes Replica Set Members
Datadog Security Labs details CVE-2026-118383, a CVSS 4.0 9.5 MongoDB use-after-free that lets unauthenticated attackers crash replica set members remotely.
Application Security
Node.js Security Releases Fix HTTP/2 Crash and TLS Memory Leaks
Node.js 22.23.5, 24.22.3 and 26.13.1 fix up to 17 flaws, including HTTP/2 crashes and memory leaks that can expose TLS private keys, with no workaround.
CVE Vulnerability Alerts
PHP2Shell Attacks on Check Point Gateways Deploy TSGA, ESXi Wiper
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Citrix Patches 28 NetScaler Flaws and Critical Console Auth Bypass
This Week’s Security Spotlight
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
CVE Vulnerability Alerts
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
DOJ Seizes $1.2B of North Korea’s Binance Haul, Disrupts FaceStealer
The DOJ obtained authority to seize over $1.2 billion of the roughly $6.3 billion stolen from Binance, while the FBI disrupted North Korea's FaceStealer scheme.
TSMC Confirms Employee Data Leak Traced to Third-Party Cloud Vendor
TSMC confirmed some current and former employee data appeared online without authorization via a cloud provider, and found no breach of its own systems.
Citrix Patches 28 NetScaler Flaws and Critical Console Auth Bypass
Citrix fixed 31 CVEs across four bulletins, including 28 NetScaler ADC and Gateway memory flaws and a CVSS 9.4 NetScaler Console authentication bypass.
Apify Rotates API Tokens and Urges 2FA Resets After Breach
Apify rotated API tokens and proxy passwords and reset all sessions after an intruder reached internal systems on November 9 and 10, with 2FA exposure ...
PostgreSQL Fixes 52 Vulnerabilities and Ends Support for Version 14
PostgreSQL releases 18.7, 17.12, 16.16, 15.20 and 14.25 fix 52 security flaws, the largest batch on record, and 14.25 is the final version 14 release.
PTC Patches Critical Windchill and FlexPLM Flaw CVE-2026-126325
PTC fixed CVE-2026-126325, a CVSS 9.2 deserialization flaw in Windchill and FlexPLM that allows remote code execution; self-hosted customers must patch.
Zoho Publishes Eight Critical ManageEngine CVEs, One Rated 9.9
Zoho disclosed eight critical ManageEngine flaws, led by CVE-2026-12591, a CVSS 9.9 privilege escalation in M365 Manager Plus, plus bugs in DDI Central.
Mitel Fixes Critical MiVoice MX-ONE Authentication Bypass Flaw
Mitel issued hotfixes for three MiVoice MX-ONE flaws, including a CVSS 9.4 authentication bypass that lets a LAN attacker log in as admin and alter ...
Google Cloud Warns of AMD Turin CPU Flaws Leaking Data in VMs
Google Cloud says three Transient Scheduler Attack flaws affect AMD EPYC Turin CPUs and can leak data between processes inside a VM, rated Medium severity.
Red Hat Publishes 21 CVEs, Led by CVSS 9.6 Satellite Sandbox Bypass
Red Hat disclosed 21 CVEs, led by CVE-2026-107360, a CVSS 9.6 sandbox bypass in Satellite's rubygem-safemode that lets template editors call blocked methods.
School Bomb-Threat Emails Trace to Addresses in Stolen Credential Data
Bomb-threat emails hit about 6,000 Italian schools and hundreds in Northern Ireland; Hudson Rock found two linked sender addresses in infostealer data.
Maersk Confirms Data Theft as WhiteArmor Demands $5 Million
Maersk confirmed unauthorized access to a legacy system from an acquisition, while the WhiteArmor ransomware group claims 100 GB of stolen logistics data.
Attackers Hijack ScreenConnect at MSPs as ConnectWise Cuts Extensions
Huntress says attackers abused ScreenConnect Run Command at MSPs to push rogue clients and the SCKit toolkit; ConnectWise disabled five extensions at partners.
wfx-loot Campaign Used 4,837 Hijacked GitHub Accounts for CI Stealer
Aikido Security says the wfx-loot campaign used 4,837 stolen GitHub accounts to plant a CI secret stealer that ran in at least 1,806 repositories so ...
Apache 2.4.71 Fixes Critical mod_http2 RCE Flaw CVE-2026-119618
Apache HTTP Server 2.4.71 fixes CVE-2026-119618, a critical mod_http2 race condition rated CVSS 9.8 by Red Hat; Red Hat and Wiz disagree on exploit status.
Critical MongoDB Flaw CVE-2026-118383 Crashes Replica Set Members
Datadog Security Labs details CVE-2026-118383, a CVSS 4.0 9.5 MongoDB use-after-free that lets unauthenticated attackers crash replica set members remotely.
Node.js Security Releases Fix HTTP/2 Crash and TLS Memory Leaks
Node.js 22.23.5, 24.22.3 and 26.13.1 fix up to 17 flaws, including HTTP/2 crashes and memory leaks that can expose TLS private keys, with no workaround.
Poland Takes ePUAP E-Government Platform Offline After Cyberattack
Poland disabled its ePUAP e-government platform after a detected cyberattack; Trusted Profile digital ID signing may be affected and no restoration date is set.
AntiFox AI Pentest Platform Abused to Steal AWS Production Secrets
Arctic Wolf Labs links the AntiFox agentic pentest platform to attacks on IIS web apps and AWS environments that exposed production secrets and deleted S3 ...
Researchers Unmask Qilin Ransomware Administrator ‘Haise’
KrebsOnSecurity, using Intel 471, Flashpoint and IntelHawk data, identifies Qilin administrator Haise as a 36-year-old St. Petersburg man; no charges announced.