Cyber Security
Cybersecurity
GMO Offers $1M Bounty After Onamae Desktop Cloud Data Leak
GMO Internet told Onamae Desktop Cloud customers to power off PCs after attackers leaked data, then opened a bounty of up to $1 million for ...
Cybersecurity
FBI Seizes Virtualine Bulletproof Hosting Domain in Takedown
The Justice Department seized virtualine.net, a bulletproof hosting provider used for phishing, carding and illegal content, with European and private partners.
Application Security
Attackers Probe Oracle EBS SQL Injection CVE-2026-101767
Defused saw exploratory attacks on its decoys against CVE-2026-101767, a CVSS 9.8 unauthenticated SQL injection in Oracle E-Business Suite patched last week.
AI Security
LiteLLM Patches CVSS 10.0 Flaw Exposing Proxy Master Key
BerriAI fixed a CVSS 10.0 LiteLLM proxy flaw that lets unauthenticated attackers read local files and steal the master key on Enterprise-licensed deployments.
Application Security
Magecart Group Hijacks Convertr Analytics Script to Skim Cards
A Brazilian Magecart gang altered Convertr's Plausible analytics script on checkout pages to steal card data and CPF taxpayer IDs from shoppers, Sansec reports.
Cybersecurity
ENGIE Confirms French Customer Data Stolen via Partner Platform
ENGIE says attackers breached a partner marketing tool and stole names, addresses and contract numbers of French customers; internal IT systems were not hit.
Cybersecurity
Nefilim and Hive Ransomware Affiliate Stryzhak Gets 70 Months
Ukrainian national Artem Stryzhak, 36, was sentenced to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware operations.
Cybersecurity
Italy’s Chamber of Deputies Confirms Email Accounts Targeted
Italy's Chamber of Deputies confirmed its IT systems were targeted, with reports naming three email accounts including one assigned to Giorgia Meloni.
Application Security
Adobe Patches Nine Critical Flaws in Campaign Classic, Connect
Adobe fixed nine critical vulnerabilities in Campaign Classic and Connect, led by CVE-2026-105781, a CVSS 10.0 SQL injection, in two October bulletins.
CVE Vulnerability Alerts
WatchGuard Publishes 18 Fireware OS Advisories, Seven Critical
WatchGuard released 18 Fireware OS advisories for Firebox firewalls, seven rated critical, led by a 9.5 WireGuard stack buffer overflow, with fixes available.
Application Security
NVIDIA Patches CVSS 10.0 Authentication Flaw in NeMo Toolkit
NVIDIA fixed CVE-2026-65145, a CVSS 10.0 missing-authentication flaw in the NeMo Agent Toolkit, plus five other bugs in NeMo, TensorRT-LLM and PhysX products.
Application Security
Chrome 156 Update Fixes 52 Flaws Including Sandbox Escape
Google's Chrome 156.0.8078.73 update fixes 52 flaws, four critical, including CVE-2026-118306, a FileSystem bug that allows code execution outside the sandbox.
AI Security
Fake Claude Download Pages on claude.ai Spread Mac Stealer
Gen Digital found fake Claude install guides hosted on the real claude.ai domain, promoted by Google Ads, delivering Atomic macOS Stealer and a Windows RAT.
Cybersecurity
Fake IT Support Teams Chats Tied to 400+ Intrusions, Arctic Wolf Says
Arctic Wolf details a pattern in 400+ incidents where attackers pose as IT support in Microsoft Teams external chats and run malware within 15 minutes.
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
CISA added PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to its KEV catalog after honeypots logged 35 working shells, with a DPRK-linked group suspected.
Application Security
Microsoft and Palo Alto Patch Critical Brotli Flaw CVE-2026-111497
Microsoft shipped out-of-band .NET fixes and Palo Alto confirmed PAN-OS exposure to Brotli flaw CVE-2026-111497, as Wiz finds 91% of cloud environments exposed.
Cybersecurity
Gheist Campaign Uses Stolen GitHub Tokens on 850+ Accounts
Wiz Research says the Gheist campaign used stolen GitHub tokens to pull CI secrets from 850+ accounts, hitting private repos and GitHub Enterprise Server.
Cybersecurity
UNM Health System Diverts Ambulances After Cybersecurity Incident
UNM Health System diverted ambulances and canceled clinic visits on Monday after a cybersecurity incident, leaving New Mexico without a trauma center option.
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
Erica Windisch's Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says a fix is close.
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the flaw to its KEV catalog.
TOP CYBERSECURITY HEADLINES
Application Security
Magecart Group Hijacks Convertr Analytics Script to Skim Cards
This Week’s Security Spotlight
Application Security
NVIDIA Patches CVSS 10.0 Authentication Flaw in NeMo Toolkit
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
LiteLLM Patches CVSS 10.0 Flaw Exposing Proxy Master Key
BerriAI fixed a CVSS 10.0 LiteLLM proxy flaw that lets unauthenticated attackers read local files and steal the master key on Enterprise-licensed deployments.
Magecart Group Hijacks Convertr Analytics Script to Skim Cards
A Brazilian Magecart gang altered Convertr's Plausible analytics script on checkout pages to steal card data and CPF taxpayer IDs from shoppers, Sansec reports.
ENGIE Confirms French Customer Data Stolen via Partner Platform
ENGIE says attackers breached a partner marketing tool and stole names, addresses and contract numbers of French customers; internal IT systems were not hit.
Nefilim and Hive Ransomware Affiliate Stryzhak Gets 70 Months
Ukrainian national Artem Stryzhak, 36, was sentenced to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware operations.
Italy’s Chamber of Deputies Confirms Email Accounts Targeted
Italy's Chamber of Deputies confirmed its IT systems were targeted, with reports naming three email accounts including one assigned to Giorgia Meloni.
Adobe Patches Nine Critical Flaws in Campaign Classic, Connect
Adobe fixed nine critical vulnerabilities in Campaign Classic and Connect, led by CVE-2026-105781, a CVSS 10.0 SQL injection, in two October bulletins.
WatchGuard Publishes 18 Fireware OS Advisories, Seven Critical
WatchGuard released 18 Fireware OS advisories for Firebox firewalls, seven rated critical, led by a 9.5 WireGuard stack buffer overflow, with fixes available.
NVIDIA Patches CVSS 10.0 Authentication Flaw in NeMo Toolkit
NVIDIA fixed CVE-2026-65145, a CVSS 10.0 missing-authentication flaw in the NeMo Agent Toolkit, plus five other bugs in NeMo, TensorRT-LLM and PhysX products.
Chrome 156 Update Fixes 52 Flaws Including Sandbox Escape
Google's Chrome 156.0.8078.73 update fixes 52 flaws, four critical, including CVE-2026-118306, a FileSystem bug that allows code execution outside the sandbox.
Fake Claude Download Pages on claude.ai Spread Mac Stealer
Gen Digital found fake Claude install guides hosted on the real claude.ai domain, promoted by Google Ads, delivering Atomic macOS Stealer and a Windows RAT.
Fake IT Support Teams Chats Tied to 400+ Intrusions, Arctic Wolf Says
Arctic Wolf details a pattern in 400+ incidents where attackers pose as IT support in Microsoft Teams external chats and run malware within 15 minutes.
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
CISA added PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to its KEV catalog after honeypots logged 35 working shells, with a DPRK-linked group suspected.
Microsoft and Palo Alto Patch Critical Brotli Flaw CVE-2026-111497
Microsoft shipped out-of-band .NET fixes and Palo Alto confirmed PAN-OS exposure to Brotli flaw CVE-2026-111497, as Wiz finds 91% of cloud environments exposed.
Gheist Campaign Uses Stolen GitHub Tokens on 850+ Accounts
Wiz Research says the Gheist campaign used stolen GitHub tokens to pull CI secrets from 850+ accounts, hitting private repos and GitHub Enterprise Server.
UNM Health System Diverts Ambulances After Cybersecurity Incident
UNM Health System diverted ambulances and canceled clinic visits on Monday after a cybersecurity incident, leaving New Mexico without a trauma center option.
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
Erica Windisch's Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says a fix is close.
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the flaw to its KEV catalog.
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
HashiCorp fixed CVE-2026-110720, a CVSS 9.9 authorization flaw in consul-k8s that lets low-privileged users gain elevated Consul privileges across namespaces.
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities
Rapid7 reportedly disclosed 17 Zimbra Collaboration Suite flaws, from cross-site scripting to sudo-based root escalation, with patch releases now available.
Sansec: 953 Online Stores Infected in Magento Loader Campaign
Sansec says an unknown actor infected 953 online stores, mostly Magento, since July 2025 using five loader domains and a database-resident cms_block loader.