Dell Fixes 44 PowerStore Flaws in DSA-2026-479, Seven Rated 9.8
November 2, 2026
Dell’s DSA-2026-479 patches 44 PowerStore vulnerabilities, including seven rated CVSS 9.8 in the SDNAS file services layer. Upgrade to OS
News
Dell Fixes 44 PowerStore Flaws in DSA-2026-479, Seven Rated 9.8
Dell's DSA-2026-479 patches 44 PowerStore vulnerabilities, including seven rated CVSS 9.8 in the SDNAS file services layer. Upgrade to OS 5.1.0.0-2798105.
MediaTek November Bulletin Fixes 57 Flaws, Six Critical Modem Bugs
MediaTek's November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio contact.
Apache Wicket Discloses 19 Vulnerabilities Across Three Release Lines
Apache Wicket disclosed 19 vulnerabilities across versions 8.x, 9.x and 10.x, including XSS, missing authorization and upload DoS bugs. Upgrade to 10.12.0.
Public Exploit Targets Linux Bonding Driver Flaw CVE-2026-31419
A public exploit for CVE-2026-31419, a Linux kernel bonding driver race condition, demonstrates root and container escape on Google's Container-Optimized OS.
Binance Loses About $6.3 Billion in Record Crypto Heist
Binance says a compromised DevOps laptop let attackers drain about $6.3 billion in assets, with nearly $3 billion frozen. TRM Labs points to TraderTraitor.
Drupal Commerce Core Auth Bypass CVE-2026-118539 Under Attack
Drupal warns attackers are exploiting CVE-2026-118539, a missing-authorization flaw in Commerce Core that allows an access bypass on affected online stores.
WordPress 7.1.4 Fixes Core RCE Flaw Attackers Are Probing
Wordfence logged more than 18,500 malicious requests in 21 hours against a WordPress Core upgrade flaw. WordPress 7.1.4 randomizes the staging directory.
Cisco Patches Exploited ASA/FTD VPN Zero-Day CVE-2026-76418
Cisco fixed CVE-2026-76418, a zero-day that crashes ASA and FTD SSL VPN devices. CISA added it and a GitLab RCE to KEV with a November ...
Polymarket Halts Trading After Hacked DebugBear Script Drains Wallets
Attackers compromised DebugBear's monitoring script to serve crypto-draining code on Polymarket, with about $2.5 million traced as stolen from trader wallets.
Cyberattack Knocks Belgium’s MyMinfin Tax Portal Offline
Belgium's FPS Finance confirmed a cyberattack and pulled several digital services offline, including MyMinfin, and pushed one tax filing deadline to November 16.
MediaTek November Bulletin Fixes 57 Flaws, Six Critical Modem Bugs
November 2, 2026
MediaTek’s November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio
Apache Wicket Discloses 19 Vulnerabilities Across Three Release Lines
November 2, 2026
Apache Wicket disclosed 19 vulnerabilities across versions 8.x, 9.x and 10.x, including XSS, missing authorization and upload DoS bugs. Upgrade
Public Exploit Targets Linux Bonding Driver Flaw CVE-2026-31419
November 2, 2026
A public exploit for CVE-2026-31419, a Linux kernel bonding driver race condition, demonstrates root and container escape on Google’s Container-Optimized
Binance Loses About $6.3 Billion in Record Crypto Heist
October 30, 2026
Binance says a compromised DevOps laptop let attackers drain about $6.3 billion in assets, with nearly $3 billion frozen. TRM
Drupal Commerce Core Auth Bypass CVE-2026-118539 Under Attack
October 30, 2026
Drupal warns attackers are exploiting CVE-2026-118539, a missing-authorization flaw in Commerce Core that allows an access bypass on affected online
WordPress 7.1.4 Fixes Core RCE Flaw Attackers Are Probing
October 30, 2026
Wordfence logged more than 18,500 malicious requests in 21 hours against a WordPress Core upgrade flaw. WordPress 7.1.4 randomizes the
Cisco Patches Exploited ASA/FTD VPN Zero-Day CVE-2026-76418
October 30, 2026
Cisco fixed CVE-2026-76418, a zero-day that crashes ASA and FTD SSL VPN devices. CISA added it and a GitLab RCE
Polymarket Halts Trading After Hacked DebugBear Script Drains Wallets
October 30, 2026
Attackers compromised DebugBear’s monitoring script to serve crypto-draining code on Polymarket, with about $2.5 million traced as stolen from trader
Cyberattack Knocks Belgium’s MyMinfin Tax Portal Offline
October 30, 2026
Belgium’s FPS Finance confirmed a cyberattack and pulled several digital services offline, including MyMinfin, and pushed one tax filing deadline
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.