Cyber Security
Cybersecurity
Maersk Confirms Data Theft as WhiteArmor Demands $5 Million
Maersk confirmed unauthorized access to a legacy system from an acquisition, while the WhiteArmor ransomware group claims 100 GB of stolen logistics data.
Cybersecurity
Attackers Hijack ScreenConnect at MSPs as ConnectWise Cuts Extensions
Huntress says attackers abused ScreenConnect Run Command at MSPs to push rogue clients and the SCKit toolkit; ConnectWise disabled five extensions at partners.
Application Security
wfx-loot Campaign Used 4,837 Hijacked GitHub Accounts for CI Stealer
Aikido Security says the wfx-loot campaign used 4,837 stolen GitHub accounts to plant a CI secret stealer that ran in at least 1,806 repositories so ...
Application Security
Apache 2.4.71 Fixes Critical mod_http2 RCE Flaw CVE-2026-119618
Apache HTTP Server 2.4.71 fixes CVE-2026-119618, a critical mod_http2 race condition rated CVSS 9.8 by Red Hat; Red Hat and Wiz disagree on exploit status.
CVE Vulnerability Alerts
Critical MongoDB Flaw CVE-2026-118383 Crashes Replica Set Members
Datadog Security Labs details CVE-2026-118383, a CVSS 4.0 9.5 MongoDB use-after-free that lets unauthenticated attackers crash replica set members remotely.
Application Security
Node.js Security Releases Fix HTTP/2 Crash and TLS Memory Leaks
Node.js 22.23.5, 24.22.3 and 26.13.1 fix up to 17 flaws, including HTTP/2 crashes and memory leaks that can expose TLS private keys, with no workaround.
Cybersecurity
Poland Takes ePUAP E-Government Platform Offline After Cyberattack
Poland disabled its ePUAP e-government platform after a detected cyberattack; Trusted Profile digital ID signing may be affected and no restoration date is set.
AI Security
AntiFox AI Pentest Platform Abused to Steal AWS Production Secrets
Arctic Wolf Labs links the AntiFox agentic pentest platform to attacks on IIS web apps and AWS environments that exposed production secrets and deleted S3 ...
Cybersecurity
Researchers Unmask Qilin Ransomware Administrator ‘Haise’
KrebsOnSecurity, using Intel 471, Flashpoint and IntelHawk data, identifies Qilin administrator Haise as a 36-year-old St. Petersburg man; no charges announced.
Application Security
Critical Red Hat Quay Flaw CVE-2026-123710 Allows Signing Takeover
Red Hat Quay flaw CVE-2026-123710, rated CVSS 9.8, lets attackers install a trusted signing key and read or overwrite any repository; fixes are merged upstream.
CVE Vulnerability Alerts
Zoom Patches Critical Workplace for Windows Flaw CVE-2026-108187
Zoom fixed two Workplace for Windows privilege-escalation flaws, CVE-2026-108187 and CVE-2026-108186, on November 11; the company reports no exploitation.
Application Security
Chrome 157 Update Fixes 83 Flaws, Including Five Critical Bugs
Google Chrome 157 fixes 83 security flaws, five critical use-after-free bugs and 78 high-severity issues, with no exploitation reported for this release.
Application Security
Telegram Patches Android Remote Code Execution Bug After V12 Demo
Telegram fixed an Android remote code execution flaw after security firm V12 showed a bot message opening Calculator; no CVE or attacks have been reported.
CVE Vulnerability Alerts
Public Exploit Released for Linux Kernel AF_UNIX Flaw CVE-2026-80521
Google kernelCTF published a working exploit for CVE-2026-80521, a CVSS 7.8 Linux kernel AF_UNIX use-after-free that gives any local user root access.
AI Security
Over 35,000 Grok-Built Apps Found Open Online, Some Leaking Data
Claroc found 37,571 Grok-built apps online, 35,578 open without sign-in, some leaking staff and customer data from X, SpaceXSI and 30 other organizations.
CVE Vulnerability Alerts
Microsoft Patches Outlook Zero-Day CVE-2026-124194 in 1,000+ Fixes
Microsoft's November Patch Tuesday fixed more than 1,000 flaws and an exploited Outlook zero-day, CVE-2026-124194, that leaks NTLMv2 hashes to attackers.
Application Security
SAP Patches Four CVSS 10.0 Flaws Including ICM2SHELL RCE
SAP's November Patch Day fixed 35 flaws, four rated CVSS 10.0, including unauthenticated RCE in ICM and Web Dispatcher dubbed ICM2SHELL and PROXYGATE.
CVE Vulnerability Alerts
Xen Orchestra Auth Bypass Exploited to Hijack XCP-ng Hosts
Attackers are exploiting a critical Xen Orchestra authentication bypass, VSA-2026-062, to gain admin control and possibly root on XCP-ng virtualization nodes.
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
Barracuda confirms attackers are chaining CVE-2026-116606 and CVE-2026-111560 to gain root on its security appliances, and CISA added both to its KEV catalog.
Application Security
Git 2.56.1 Fixes Code Execution Flaw CVE-2026-111760 in Clones
Git 2.56.1 patches six vulnerabilities, including CVE-2026-111760, which can run attacker code when developers recursively clone a malicious repository.
TOP CYBERSECURITY HEADLINES
Application Security
Apache 2.4.71 Fixes Critical mod_http2 RCE Flaw CVE-2026-119618
CVE Vulnerability Alerts
Critical MongoDB Flaw CVE-2026-118383 Crashes Replica Set Members
Application Security
Node.js Security Releases Fix HTTP/2 Crash and TLS Memory Leaks
This Week’s Security Spotlight
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
CVE Vulnerability Alerts
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
CVE Vulnerability Alerts
Working Exploit Out for Windows Error Reporting Flaw CVE-2026-97798
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Apache 2.4.71 Fixes Critical mod_http2 RCE Flaw CVE-2026-119618
Apache HTTP Server 2.4.71 fixes CVE-2026-119618, a critical mod_http2 race condition rated CVSS 9.8 by Red Hat; Red Hat and Wiz disagree on exploit status.
Critical MongoDB Flaw CVE-2026-118383 Crashes Replica Set Members
Datadog Security Labs details CVE-2026-118383, a CVSS 4.0 9.5 MongoDB use-after-free that lets unauthenticated attackers crash replica set members remotely.
Node.js Security Releases Fix HTTP/2 Crash and TLS Memory Leaks
Node.js 22.23.5, 24.22.3 and 26.13.1 fix up to 17 flaws, including HTTP/2 crashes and memory leaks that can expose TLS private keys, with no workaround.
Poland Takes ePUAP E-Government Platform Offline After Cyberattack
Poland disabled its ePUAP e-government platform after a detected cyberattack; Trusted Profile digital ID signing may be affected and no restoration date is set.
AntiFox AI Pentest Platform Abused to Steal AWS Production Secrets
Arctic Wolf Labs links the AntiFox agentic pentest platform to attacks on IIS web apps and AWS environments that exposed production secrets and deleted S3 ...
Researchers Unmask Qilin Ransomware Administrator ‘Haise’
KrebsOnSecurity, using Intel 471, Flashpoint and IntelHawk data, identifies Qilin administrator Haise as a 36-year-old St. Petersburg man; no charges announced.
Critical Red Hat Quay Flaw CVE-2026-123710 Allows Signing Takeover
Red Hat Quay flaw CVE-2026-123710, rated CVSS 9.8, lets attackers install a trusted signing key and read or overwrite any repository; fixes are merged upstream.
Zoom Patches Critical Workplace for Windows Flaw CVE-2026-108187
Zoom fixed two Workplace for Windows privilege-escalation flaws, CVE-2026-108187 and CVE-2026-108186, on November 11; the company reports no exploitation.
Chrome 157 Update Fixes 83 Flaws, Including Five Critical Bugs
Google Chrome 157 fixes 83 security flaws, five critical use-after-free bugs and 78 high-severity issues, with no exploitation reported for this release.
Telegram Patches Android Remote Code Execution Bug After V12 Demo
Telegram fixed an Android remote code execution flaw after security firm V12 showed a bot message opening Calculator; no CVE or attacks have been reported.
Public Exploit Released for Linux Kernel AF_UNIX Flaw CVE-2026-80521
Google kernelCTF published a working exploit for CVE-2026-80521, a CVSS 7.8 Linux kernel AF_UNIX use-after-free that gives any local user root access.
Over 35,000 Grok-Built Apps Found Open Online, Some Leaking Data
Claroc found 37,571 Grok-built apps online, 35,578 open without sign-in, some leaking staff and customer data from X, SpaceXSI and 30 other organizations.
Microsoft Patches Outlook Zero-Day CVE-2026-124194 in 1,000+ Fixes
Microsoft's November Patch Tuesday fixed more than 1,000 flaws and an exploited Outlook zero-day, CVE-2026-124194, that leaks NTLMv2 hashes to attackers.
SAP Patches Four CVSS 10.0 Flaws Including ICM2SHELL RCE
SAP's November Patch Day fixed 35 flaws, four rated CVSS 10.0, including unauthenticated RCE in ICM and Web Dispatcher dubbed ICM2SHELL and PROXYGATE.
Xen Orchestra Auth Bypass Exploited to Hijack XCP-ng Hosts
Attackers are exploiting a critical Xen Orchestra authentication bypass, VSA-2026-062, to gain admin control and possibly root on XCP-ng virtualization nodes.
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
Barracuda confirms attackers are chaining CVE-2026-116606 and CVE-2026-111560 to gain root on its security appliances, and CISA added both to its KEV catalog.
Git 2.56.1 Fixes Code Execution Flaw CVE-2026-111760 in Clones
Git 2.56.1 patches six vulnerabilities, including CVE-2026-111760, which can run attacker code when developers recursively clone a malicious repository.
SGLang RCE Flaw Exploited to Breach NEAR AI, 18 Agents Exposed
An attacker used a remote code execution flaw in the SGLang inference engine to breach NEAR AI, exposing 18 AI agents and about 100 Private ...
Public iOS Sandbox Escape ‘worse_query’ Threatens Wallet Keys
A public iOS exploit named worse_query could expose crypto seed phrases and private keys from other apps; Binance warned users and Apple has confirmed no ...
Apple iOS 27.2.1 Fixes iMessage Group Chat and Bluetooth Flaws
Apple's iOS 27.2.1 patches iMessage group chat flaws CVE-2026-113961 and CVE-2026-113960 plus nine Bluetooth and AirPlay pairing bugs; no exploitation known.