Cyber Security
Cybersecurity
Mozilla, Google, Apple Block Eight Weak eMudhra CA Keys
Eight eMudhra CA intermediate keys were so weak they could be computed, so Mozilla, Google, Apple and Go blocked them and eMudhra revoked the certificates.
Cybersecurity
Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
An unverified claim on a hacker marketplace says NBCUniversal production plans, budgets and tax-credit applications were stolen; the company has not confirmed.
Application Security
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
An attacker used a hijacked contributor GitHub account to swap secret-stealing builds into five OVHcloud CLI releases for about 94 minutes before detection.
Cybersecurity
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024, many in critical infrastructure.
Application Security
Public Exploit Released for Critical FortiSIEM Flaw CVE-2026-106173
Horizon3.ai published a proof-of-concept for CVE-2026-106173, a CVSS 9.4 unauthenticated path traversal flaw in Fortinet FortiSIEM that leads to code execution.
Cybersecurity
State Bank of India Confirms Data Leak of 3,897 Customer Records
State Bank of India told stock exchanges it lost certain data after 3,897 customer records appeared on the dark web in a set of about ...
Cybersecurity
Conduent Agrees to $80M Settlement Over Breach of 62M People
Conduent will pay $80 million to settle a class action over a 2024 cyber incident that exposed personal and health data of about 62 million ...
Cybersecurity
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
Calif published a working OpenBSD 7.9 root exploit chaining a 37-year-old integer overflow with a kernel flaw; syspatch errata 018 and 026 fix both bugs.
Application Security
OpenCode Silently Patched Critical RCE Flaw With No CVE
Pillar Security says OpenCode fixed a critical MCP OAuth remote code execution flaw in version 1.18.33 without a CVE or advisory, hiding it from scanners.
CVE Vulnerability Alerts
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
Unit 42 says Qilin and INC ransomware groups exploit PAN-OS flaw CVE-2026-0257 to bypass MFA, then pivot from VPN gateways to VMware vCenter and ESXi ...
Application Security
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
Attackers who breached TeamUpdraft used stolen UpdraftCentral keys to plant backdoor plugins on WordPress sites, Patchstack found; fixed releases are out.
Application Security
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Siemens confirmed attackers exploited CVE-2026-110936 in Software Center, bundling a signed copy with malicious DLLs in the ROMULUS ClickFix campaign.
Application Security
Laravel TokenGuard Flaw Lets Attackers Log In as Any User
Laravel disclosed a critical TokenGuard authentication bypass rated CVSS 9.2 that affects MySQL and MariaDB apps, plus a moderate data-loss flaw; patches exist.
Application Security
Roundcube 1.6.20 and 1.7.5 Fix 20 Flaws, Including IMAP Injection
Roundcube released 1.6.20 and 1.7.5 to fix 20 flaws, including IMAP command injection, header injection, XSS, SSRF and CSRF; no exploitation is confirmed.
Cybersecurity
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
Citizen Lab confirmed NSO Group's Pegasus spyware on the phone of Belgrade university rector Vladan Djokic days before Serbia's October 25 elections.
AI Security
AIA0001 Hacker Uses AI Agents to Breach 100+ Company Websites
NorForge says a Chinese-speaking operator used autonomous AI agents to compromise more than 100 e-commerce sites, including Deere, SharkNinja and Cummins.
Cybersecurity
Parkview Health Disables Network After Suspicious Activity
Parkview Health took its network offline over suspicious activity, knocking out MyChart across Indiana and Ohio. The cause is not confirmed as a cyberattack.
Application Security
Plex2Shell Exploit Chain Hits Plex Servers a Day After PoC Release
Attackers began exploiting the Plex2Shell chain of four CVEs in Plex Media Server a day after a public proof-of-concept, dropping a cryptominer and proxy tool.
Application Security
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
Microsoft confirmed October Windows Server updates cause OWA sign-in failures and stuck mail on on-premises Exchange servers; a fix is still pending.
Cybersecurity
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
An intruder reached a legacy OpenCode system, possibly exposing OpenAI, Anthropic and Google API keys saved by 1.4% of Console users; some report charges.
CVE Vulnerability Alerts
PHP2Shell Attacks on Check Point Gateways Deploy TSGA, ESXi Wiper
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Citrix Patches 28 NetScaler Flaws and Critical Console Auth Bypass
This Week’s Security Spotlight
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
CVE Vulnerability Alerts
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024, many in critical infrastructure.
Public Exploit Released for Critical FortiSIEM Flaw CVE-2026-106173
Horizon3.ai published a proof-of-concept for CVE-2026-106173, a CVSS 9.4 unauthenticated path traversal flaw in Fortinet FortiSIEM that leads to code execution.
State Bank of India Confirms Data Leak of 3,897 Customer Records
State Bank of India told stock exchanges it lost certain data after 3,897 customer records appeared on the dark web in a set of about ...
Conduent Agrees to $80M Settlement Over Breach of 62M People
Conduent will pay $80 million to settle a class action over a 2024 cyber incident that exposed personal and health data of about 62 million ...
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
Calif published a working OpenBSD 7.9 root exploit chaining a 37-year-old integer overflow with a kernel flaw; syspatch errata 018 and 026 fix both bugs.
OpenCode Silently Patched Critical RCE Flaw With No CVE
Pillar Security says OpenCode fixed a critical MCP OAuth remote code execution flaw in version 1.18.33 without a CVE or advisory, hiding it from scanners.
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
Unit 42 says Qilin and INC ransomware groups exploit PAN-OS flaw CVE-2026-0257 to bypass MFA, then pivot from VPN gateways to VMware vCenter and ESXi ...
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
Attackers who breached TeamUpdraft used stolen UpdraftCentral keys to plant backdoor plugins on WordPress sites, Patchstack found; fixed releases are out.
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Siemens confirmed attackers exploited CVE-2026-110936 in Software Center, bundling a signed copy with malicious DLLs in the ROMULUS ClickFix campaign.
Laravel TokenGuard Flaw Lets Attackers Log In as Any User
Laravel disclosed a critical TokenGuard authentication bypass rated CVSS 9.2 that affects MySQL and MariaDB apps, plus a moderate data-loss flaw; patches exist.
Roundcube 1.6.20 and 1.7.5 Fix 20 Flaws, Including IMAP Injection
Roundcube released 1.6.20 and 1.7.5 to fix 20 flaws, including IMAP command injection, header injection, XSS, SSRF and CSRF; no exploitation is confirmed.
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
Citizen Lab confirmed NSO Group's Pegasus spyware on the phone of Belgrade university rector Vladan Djokic days before Serbia's October 25 elections.
AIA0001 Hacker Uses AI Agents to Breach 100+ Company Websites
NorForge says a Chinese-speaking operator used autonomous AI agents to compromise more than 100 e-commerce sites, including Deere, SharkNinja and Cummins.
Parkview Health Disables Network After Suspicious Activity
Parkview Health took its network offline over suspicious activity, knocking out MyChart across Indiana and Ohio. The cause is not confirmed as a cyberattack.
Plex2Shell Exploit Chain Hits Plex Servers a Day After PoC Release
Attackers began exploiting the Plex2Shell chain of four CVEs in Plex Media Server a day after a public proof-of-concept, dropping a cryptominer and proxy tool.
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
Microsoft confirmed October Windows Server updates cause OWA sign-in failures and stuck mail on on-premises Exchange servers; a fix is still pending.
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
An intruder reached a legacy OpenCode system, possibly exposing OpenAI, Anthropic and Google API keys saved by 1.4% of Console users; some report charges.
ConnectWise Cloud Backup Stays Offline After 173 Tenants Hit
ConnectWise Cloud Backup and two linked services stay offline as Huntress confirms attackers signed in to 173 Microsoft 365 tenants with a stolen app secret.
Unpatched Broadcom WPS Flaw Lets Nearby Attackers Root Routers
Researcher Quentin Kaiser disclosed an unpatched Broadcom WPS flaw with no CVE that gives nearby attackers root code execution on millions of routers.
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Follow
Drupal patched critical RCE flaws CVE-2026-108097 in Field UI and CVE-2026-108099 in Entity List, warning exploits may be built within just hours or days.