Cyber Security
CVE Vulnerability Alerts
China-Linked Armory Castle Exploited BeyondTrust Zero-Day
BeyondTrust patched CVE-2026-102764, a Remote Support zero-day that China-nexus group Armory Castle exploited since late August, per Mandiant and Google.
Cybersecurity
BAE Systems Cyberattack Halts US Federal Bankruptcy Notices
A cyberattack on contractor BAE Systems took the Bankruptcy Noticing Center offline, halting notices for all US federal bankruptcy courts. No restoration date.
Cybersecurity
Citizen Lab: AdFection Spyware Hit Al Jazeera Through Ad Networks
Citizen Lab and Confiant detail AdFection, a zero-click spyware delivery system through online ads that infected at least 45 Al Jazeera devices with Candiru.
Cybersecurity
CERT-In: AI Agents in Testing Reached Live Indian Systems
CERT-In says AI agents under test reached live systems at Indian organizations and read sensitive data via exposed credentials. None of the victims noticed.
CVE Vulnerability Alerts
PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory
PwnEscape, tracked as CVE-2026-99999, lets code in a guest VM leak host memory and crash the host. Researchers demonstrated it against Vercel sandboxes.
Cybersecurity
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result above real Chrome.
Application Security
Chrome 155 Patches 10 Flaws, Including Critical Prerender Bug
Google released Chrome 155.0.8059.84 with fixes for 10 flaws, including critical use-after-free CVE-2026-110922 in Prerender. No exploitation reported.
CVE Vulnerability Alerts
Mitsubishi Patches ICONICS Suite Flaws; Legacy Products Get No Fix
Mitsubishi Electric patched four ICONICS Suite flaws allowing authentication bypass and code execution, but MC Works64, GENESIS32 and BizViz will get no fixes.
Application Security
Progress Patches 12 High-Severity MOVEit Transfer Vulnerabilities
Progress fixed 12 high-severity MOVEit Transfer flaws, including authentication bypasses, in releases 2025.1.6 and 2026.0.4. No exploitation has been seen.
CVE Vulnerability Alerts
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
AWS patched CVE-2026-110812, a CVSS 9.9 unsafe deserialization flaw in Apache TinkerPop Gremlin that affects Amazon Neptune engine versions 1.2.0.0 and later.
Application Security
Backuply WordPress Plugin SQL Injection Enables Site Takeover
Wordfence disclosed CVE-2026-93953, a SQL injection in the Backuply WordPress plugin, with 600,000 installs, that can lead to rogue administrator accounts.
Cybersecurity
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS to enable LLMjacking.
Cybersecurity
X Removes 13,000 Accounts Tied to Foreign Influence Operations
X says it removed more than 13,000 accounts in three suspected foreign influence operations linked to Iran, Russia and China, ahead of the US midterm ...
Cybersecurity
GreyNoise: Proxyjacking Campaign Hijacks D-Link, Ubiquiti Devices
GreyNoise found a proxyjacking campaign that compromised at least 143 edge devices in 34 countries, installing Pawns.app to resell victims' bandwidth.
Cybersecurity
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial apps via fake traffic fine ...
CVE Vulnerability Alerts
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such zero-day since September.
CVE Vulnerability Alerts
Palo Alto Patches PAN-OS RCE Zero-Day CVE-2026-0322 Under Attack
Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE giving root access that is under limited exploitation, and CISA added it to KEV.
Cybersecurity
Microsoft Seizes Domains of Chinese Phishing Kits Behind 1B Messages
Microsoft, Health-ISAC and partners seized domains tied to the CoGUI, Haozi and Iron Man phishing kits and YAM Store, linked to over a billion scam ...
Application Security
Vercel Ships Next.js 16.4.1 Fixing Two Critical RCE Flaws
Vercel released Next.js 16.4.1 and 15.5.28 to fix two critical unauthenticated remote code execution flaws and a high-severity denial-of-service bug in apps.
Cybersecurity
North Macedonia Charges Alleged OLVX Marketplace Administrator
North Macedonia charged the alleged administrator of the OLVX cybercrime marketplace in the first FBI joint cyber operation with the country, officials said.
CVE Vulnerability Alerts
China-Linked Armory Castle Exploited BeyondTrust Zero-Day
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory
Application Security
Chrome 155 Patches 10 Flaws, Including Critical Prerender Bug
This Week’s Security Spotlight
CVE Vulnerability Alerts
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
CVE Vulnerability Alerts
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Application Security
Docker Fixes Critical Docker Hub Flaw GhostPat, CVE-2026-105445
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
CERT-In: AI Agents in Testing Reached Live Indian Systems
CERT-In says AI agents under test reached live systems at Indian organizations and read sensitive data via exposed credentials. None of the victims noticed.
PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory
PwnEscape, tracked as CVE-2026-99999, lets code in a guest VM leak host memory and crash the host. Researchers demonstrated it against Vercel sandboxes.
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
A counterfeit Chrome app from developer Hizbartech reached 100,000 downloads on Google Play and reportedly appeared as a sponsored result above real Chrome.
Chrome 155 Patches 10 Flaws, Including Critical Prerender Bug
Google released Chrome 155.0.8059.84 with fixes for 10 flaws, including critical use-after-free CVE-2026-110922 in Prerender. No exploitation reported.
Mitsubishi Patches ICONICS Suite Flaws; Legacy Products Get No Fix
Mitsubishi Electric patched four ICONICS Suite flaws allowing authentication bypass and code execution, but MC Works64, GENESIS32 and BizViz will get no fixes.
Progress Patches 12 High-Severity MOVEit Transfer Vulnerabilities
Progress fixed 12 high-severity MOVEit Transfer flaws, including authentication bypasses, in releases 2025.1.6 and 2026.0.4. No exploitation has been seen.
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
AWS patched CVE-2026-110812, a CVSS 9.9 unsafe deserialization flaw in Apache TinkerPop Gremlin that affects Amazon Neptune engine versions 1.2.0.0 and later.
Backuply WordPress Plugin SQL Injection Enables Site Takeover
Wordfence disclosed CVE-2026-93953, a SQL injection in the Backuply WordPress plugin, with 600,000 installs, that can lead to rogue administrator accounts.
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS to enable LLMjacking.
X Removes 13,000 Accounts Tied to Foreign Influence Operations
X says it removed more than 13,000 accounts in three suspected foreign influence operations linked to Iran, Russia and China, ahead of the US midterm ...
GreyNoise: Proxyjacking Campaign Hijacks D-Link, Ubiquiti Devices
GreyNoise found a proxyjacking campaign that compromised at least 143 edge devices in 34 countries, installing Pawns.app to resell victims' bandwidth.
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial apps via fake traffic fine ...
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such zero-day since September.
Palo Alto Patches PAN-OS RCE Zero-Day CVE-2026-0322 Under Attack
Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE giving root access that is under limited exploitation, and CISA added it to KEV.
Microsoft Seizes Domains of Chinese Phishing Kits Behind 1B Messages
Microsoft, Health-ISAC and partners seized domains tied to the CoGUI, Haozi and Iron Man phishing kits and YAM Store, linked to over a billion scam ...
Vercel Ships Next.js 16.4.1 Fixing Two Critical RCE Flaws
Vercel released Next.js 16.4.1 and 15.5.28 to fix two critical unauthenticated remote code execution flaws and a high-severity denial-of-service bug in apps.
North Macedonia Charges Alleged OLVX Marketplace Administrator
North Macedonia charged the alleged administrator of the OLVX cybercrime marketplace in the first FBI joint cyber operation with the country, officials said.
JPCERT/CC Warns SiteGuard WAF Flaw CVE-2026-106931 Is Exploited
JPCERT/CC warns attackers are exploiting CVE-2026-106931, an OS command injection in SiteGuard Server Edition WAF that grants root or SYSTEM privileges.
Ahsay Issues New AhsayCBS Hotfixes After Earlier Patches Failed
Ahsay released new AhsayCBS hotfixes after its August patches did not fully close CVE-2026-105133 and CVE-2026-105134, and CISA added both flaws to KEV.
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own security checks.