Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
November 3, 2026
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says
Network Security
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says built the backdoor into firmware.
Refrigeration Attacks Hit Supermarkets in Six European Countries
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising set points to 55 C.
Arista Patches Two CVSS 9.8 RCE Flaws Including HTTP2Shell
Arista fixed two CVSS 9.8 remote code execution flaws, HTTP2Shell in VeloCloud Orchestrator and a Linux kernel bug affecting access points and NDR devices.
Cisco Patches Exploited ASA/FTD VPN Zero-Day CVE-2026-76418
Cisco fixed CVE-2026-76418, a zero-day that crashes ASA and FTD SSL VPN devices. CISA added it and a GitLab RCE to KEV with a November ...
Cyberattack Knocks Belgium’s MyMinfin Tax Portal Offline
Belgium's FPS Finance confirmed a cyberattack and pulled several digital services offline, including MyMinfin, and pushed one tax filing deadline to November 16.
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen in the wild.
WatchGuard Publishes 18 Fireware OS Advisories, Seven Critical
WatchGuard released 18 Fireware OS advisories for Firebox firewalls, seven rated critical, led by a 9.5 WireGuard stack buffer overflow, with fixes available.
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
Erica Windisch's Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says a fix is close.
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
Arista fixed CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator that it says is exploited, letting low-privilege users gain operator access.
Refrigeration Attacks Hit Supermarkets in Six European Countries
November 3, 2026
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising
Arista Patches Two CVSS 9.8 RCE Flaws Including HTTP2Shell
November 3, 2026
Arista fixed two CVSS 9.8 remote code execution flaws, HTTP2Shell in VeloCloud Orchestrator and a Linux kernel bug affecting access
Cisco Patches Exploited ASA/FTD VPN Zero-Day CVE-2026-76418
October 30, 2026
Cisco fixed CVE-2026-76418, a zero-day that crashes ASA and FTD SSL VPN devices. CISA added it and a GitLab RCE
Cyberattack Knocks Belgium’s MyMinfin Tax Portal Offline
October 30, 2026
Belgium’s FPS Finance confirmed a cyberattack and pulled several digital services offline, including MyMinfin, and pushed one tax filing deadline
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
October 29, 2026
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
October 29, 2026
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen
WatchGuard Publishes 18 Fireware OS Advisories, Seven Critical
October 28, 2026
WatchGuard released 18 Fireware OS advisories for Firebox firewalls, seven rated critical, led by a 9.5 WireGuard stack buffer overflow,
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
October 27, 2026
Erica Windisch’s Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
October 23, 2026
Arista fixed CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator that it says is exploited, letting low-privilege users gain
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.