Cyber Security
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
CISA added PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to its KEV catalog after honeypots logged 35 working shells, with a DPRK-linked group suspected.
Application Security
Microsoft and Palo Alto Patch Critical Brotli Flaw CVE-2026-111497
Microsoft shipped out-of-band .NET fixes and Palo Alto confirmed PAN-OS exposure to Brotli flaw CVE-2026-111497, as Wiz finds 91% of cloud environments exposed.
Cybersecurity
Gheist Campaign Uses Stolen GitHub Tokens on 850+ Accounts
Wiz Research says the Gheist campaign used stolen GitHub tokens to pull CI secrets from 850+ accounts, hitting private repos and GitHub Enterprise Server.
Cybersecurity
UNM Health System Diverts Ambulances After Cybersecurity Incident
UNM Health System diverted ambulances and canceled clinic visits on Monday after a cybersecurity incident, leaving New Mexico without a trauma center option.
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
Erica Windisch's Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says a fix is close.
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the flaw to its KEV catalog.
Application Security
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
HashiCorp fixed CVE-2026-110720, a CVSS 9.9 authorization flaw in consul-k8s that lets low-privileged users gain elevated Consul privileges across namespaces.
Application Security
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities
Rapid7 reportedly disclosed 17 Zimbra Collaboration Suite flaws, from cross-site scripting to sudo-based root escalation, with patch releases now available.
Application Security
Sansec: 953 Online Stores Infected in Magento Loader Campaign
Sansec says an unknown actor infected 953 online stores, mostly Magento, since July 2025 using five loader domains and a database-resident cms_block loader.
Cybersecurity
Seoul Police Identify 7 Suspects in ARTEX AI-Assisted Hacking Spree
Seoul police identified seven suspects who used the ARTEX AI framework to breach 90+ South Korean organizations and steal 8.2 million records, media report.
Cybersecurity
WhiteArmor Gang Claims 19GB Hisense Data Theft, Demands $5 Million
A new extortion group, WhiteArmor, claims it stole 19GB of Hisense data and demands $5 million in Bitcoin. Hisense has not confirmed the unverified claim.
Application Security
OpenMage Fixes 34 Magento LTS Flaws, Including Critical OAuth CSRF
OpenMage Magento LTS 20.19.0 and 20.18.2 fix 34 vulnerabilities, including a CVSS 9.0 OAuth CSRF flaw that could yield a persistent admin or customer API ...
Application Security
Mautic 7.2.2 Patches CVSS 9.9 File-Upload RCE CVE-2026-115188
Mautic 7.2.2, 6.0.10 and 5.2.12 fix CVE-2026-115188, a CVSS 9.9 file-upload remote code execution flaw, along with SQL injection and API access control bugs.
Cybersecurity
Dutch Police Arrest 2 Over AI-Voiced Bank Fraud Using NFC App
Rotterdam police arrested two men over AI-voiced fake bank calls and an NFC card-scanning app that took about EUR 380,000 from 170 Dutch victims in ...
CVE Vulnerability Alerts
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
A researcher published a PoC for macOS autofs flaws CVE-2026-84568 (root) and CVE-2026-84570 (Gatekeeper bypass), which Apple already patched in September.
Cybersecurity
Capcom ID Breach Exposes 11.77 Million Email Addresses
Capcom confirmed attackers accessed its CAPCOM ID login service, exposing 11,774,247 email addresses and login metadata, and locked out 196 account holders.
Cybersecurity
Quest Diagnostics Reports Breach of Quanum Lab Services Manager
Quest Diagnostics told regulators an intruder accessed its Quanum Lab Services Manager platform and may have reached certain patient records; scope is unknown.
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
GitLab fixed CVE-2026-110264, a CVSS 10.0 regex flaw in Onigmo that can let unauthenticated users run code on self-managed servers back to version 7.0.
CVE Vulnerability Alerts
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
Arista fixed CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator that it says is exploited, letting low-privilege users gain operator access.
Cybersecurity
eMudhra Exits TLS Business as Chrome and Oracle Distrust Its Keys
eMudhra will leave the global TLS certificate business, Chrome will distrust its ECC G3 root on October 27, and Oracle issued a Java alert for ...
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
This Week’s Security Spotlight
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
UNM Health System Diverts Ambulances After Cybersecurity Incident
UNM Health System diverted ambulances and canceled clinic visits on Monday after a cybersecurity incident, leaving New Mexico without a trauma center option.
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
Erica Windisch's Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says a fix is close.
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the flaw to its KEV catalog.
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
HashiCorp fixed CVE-2026-110720, a CVSS 9.9 authorization flaw in consul-k8s that lets low-privileged users gain elevated Consul privileges across namespaces.
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities
Rapid7 reportedly disclosed 17 Zimbra Collaboration Suite flaws, from cross-site scripting to sudo-based root escalation, with patch releases now available.
Sansec: 953 Online Stores Infected in Magento Loader Campaign
Sansec says an unknown actor infected 953 online stores, mostly Magento, since July 2025 using five loader domains and a database-resident cms_block loader.
Seoul Police Identify 7 Suspects in ARTEX AI-Assisted Hacking Spree
Seoul police identified seven suspects who used the ARTEX AI framework to breach 90+ South Korean organizations and steal 8.2 million records, media report.
WhiteArmor Gang Claims 19GB Hisense Data Theft, Demands $5 Million
A new extortion group, WhiteArmor, claims it stole 19GB of Hisense data and demands $5 million in Bitcoin. Hisense has not confirmed the unverified claim.
OpenMage Fixes 34 Magento LTS Flaws, Including Critical OAuth CSRF
OpenMage Magento LTS 20.19.0 and 20.18.2 fix 34 vulnerabilities, including a CVSS 9.0 OAuth CSRF flaw that could yield a persistent admin or customer API ...
Mautic 7.2.2 Patches CVSS 9.9 File-Upload RCE CVE-2026-115188
Mautic 7.2.2, 6.0.10 and 5.2.12 fix CVE-2026-115188, a CVSS 9.9 file-upload remote code execution flaw, along with SQL injection and API access control bugs.
Dutch Police Arrest 2 Over AI-Voiced Bank Fraud Using NFC App
Rotterdam police arrested two men over AI-voiced fake bank calls and an NFC card-scanning app that took about EUR 380,000 from 170 Dutch victims in ...
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
A researcher published a PoC for macOS autofs flaws CVE-2026-84568 (root) and CVE-2026-84570 (Gatekeeper bypass), which Apple already patched in September.
Capcom ID Breach Exposes 11.77 Million Email Addresses
Capcom confirmed attackers accessed its CAPCOM ID login service, exposing 11,774,247 email addresses and login metadata, and locked out 196 account holders.
Quest Diagnostics Reports Breach of Quanum Lab Services Manager
Quest Diagnostics told regulators an intruder accessed its Quanum Lab Services Manager platform and may have reached certain patient records; scope is unknown.
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
GitLab fixed CVE-2026-110264, a CVSS 10.0 regex flaw in Onigmo that can let unauthenticated users run code on self-managed servers back to version 7.0.
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
Arista fixed CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator that it says is exploited, letting low-privilege users gain operator access.
eMudhra Exits TLS Business as Chrome and Oracle Distrust Its Keys
eMudhra will leave the global TLS certificate business, Chrome will distrust its ECC G3 root on October 27, and Oracle issued a Java alert for ...
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin Console.
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
Trend Micro's ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel mailing lists, with no mainline fix available and no CVE IDs ...
CISA Warns of Nine Kiloview E3 Encoder Flaws, Two at CVSS 9.9
CISA advisory ICSA-26-295-01 covers nine Kiloview E3 NDI encoder flaws, including two CVSS 9.9 command injections that give root; firmware V1.30 fixes them.