Cyber Security
Cybersecurity
Poland Takes ePUAP E-Government Platform Offline After Cyberattack
Poland disabled its ePUAP e-government platform after a detected cyberattack; Trusted Profile digital ID signing may be affected and no restoration date is set.
AI Security
AntiFox AI Pentest Platform Abused to Steal AWS Production Secrets
Arctic Wolf Labs links the AntiFox agentic pentest platform to attacks on IIS web apps and AWS environments that exposed production secrets and deleted S3 ...
Cybersecurity
Researchers Unmask Qilin Ransomware Administrator ‘Haise’
KrebsOnSecurity, using Intel 471, Flashpoint and IntelHawk data, identifies Qilin administrator Haise as a 36-year-old St. Petersburg man; no charges announced.
Application Security
Critical Red Hat Quay Flaw CVE-2026-123710 Allows Signing Takeover
Red Hat Quay flaw CVE-2026-123710, rated CVSS 9.8, lets attackers install a trusted signing key and read or overwrite any repository; fixes are merged upstream.
CVE Vulnerability Alerts
Zoom Patches Critical Workplace for Windows Flaw CVE-2026-108187
Zoom fixed two Workplace for Windows privilege-escalation flaws, CVE-2026-108187 and CVE-2026-108186, on November 11; the company reports no exploitation.
Application Security
Chrome 157 Update Fixes 83 Flaws, Including Five Critical Bugs
Google Chrome 157 fixes 83 security flaws, five critical use-after-free bugs and 78 high-severity issues, with no exploitation reported for this release.
Application Security
Telegram Patches Android Remote Code Execution Bug After V12 Demo
Telegram fixed an Android remote code execution flaw after security firm V12 showed a bot message opening Calculator; no CVE or attacks have been reported.
CVE Vulnerability Alerts
Public Exploit Released for Linux Kernel AF_UNIX Flaw CVE-2026-80521
Google kernelCTF published a working exploit for CVE-2026-80521, a CVSS 7.8 Linux kernel AF_UNIX use-after-free that gives any local user root access.
AI Security
Over 35,000 Grok-Built Apps Found Open Online, Some Leaking Data
Claroc found 37,571 Grok-built apps online, 35,578 open without sign-in, some leaking staff and customer data from X, SpaceXSI and 30 other organizations.
CVE Vulnerability Alerts
Microsoft Patches Outlook Zero-Day CVE-2026-124194 in 1,000+ Fixes
Microsoft's November Patch Tuesday fixed more than 1,000 flaws and an exploited Outlook zero-day, CVE-2026-124194, that leaks NTLMv2 hashes to attackers.
Application Security
SAP Patches Four CVSS 10.0 Flaws Including ICM2SHELL RCE
SAP's November Patch Day fixed 35 flaws, four rated CVSS 10.0, including unauthenticated RCE in ICM and Web Dispatcher dubbed ICM2SHELL and PROXYGATE.
CVE Vulnerability Alerts
Xen Orchestra Auth Bypass Exploited to Hijack XCP-ng Hosts
Attackers are exploiting a critical Xen Orchestra authentication bypass, VSA-2026-062, to gain admin control and possibly root on XCP-ng virtualization nodes.
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
Barracuda confirms attackers are chaining CVE-2026-116606 and CVE-2026-111560 to gain root on its security appliances, and CISA added both to its KEV catalog.
Application Security
Git 2.56.1 Fixes Code Execution Flaw CVE-2026-111760 in Clones
Git 2.56.1 patches six vulnerabilities, including CVE-2026-111760, which can run attacker code when developers recursively clone a malicious repository.
Application Security
SGLang RCE Flaw Exploited to Breach NEAR AI, 18 Agents Exposed
An attacker used a remote code execution flaw in the SGLang inference engine to breach NEAR AI, exposing 18 AI agents and about 100 Private ...
CVE Vulnerability Alerts
Public iOS Sandbox Escape ‘worse_query’ Threatens Wallet Keys
A public iOS exploit named worse_query could expose crypto seed phrases and private keys from other apps; Binance warned users and Apple has confirmed no ...
CVE Vulnerability Alerts
Apple iOS 27.2.1 Fixes iMessage Group Chat and Bluetooth Flaws
Apple's iOS 27.2.1 patches iMessage group chat flaws CVE-2026-113961 and CVE-2026-113960 plus nine Bluetooth and AirPlay pairing bugs; no exploitation known.
CVE Vulnerability Alerts
Fortinet Patches Eight Critical Flaws in FortiOS and FortiManager
Fortinet fixed eight critical vulnerabilities rated CVSS 9.0 to 9.8 across FortiOS, FortiManager, FortiAnalyzer and FortiSASE; six need no authentication.
Application Security
Synology Patches 27 DSM Flaws, Including CVSS 9.8 SQL Injection
Synology fixed 27 DiskStation Manager flaws, including CVE-2026-76954, a pre-authentication SQL injection in the Auth API rated CVSS 9.8, with no workarounds.
CVE Vulnerability Alerts
Ivanti Patches Critical EPM SQL Injection and CSA Auth Flaw
Ivanti's November advisories fix 13 flaws, including a CVSS 9.8 Endpoint Manager SQL injection and a CVSS 9.4 Cloud Services Application authentication flaw.
CVE Vulnerability Alerts
PHP2Shell Attacks on Check Point Gateways Deploy TSGA, ESXi Wiper
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Citrix Patches 28 NetScaler Flaws and Critical Console Auth Bypass
This Week’s Security Spotlight
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
CVE Vulnerability Alerts
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Critical Red Hat Quay Flaw CVE-2026-123710 Allows Signing Takeover
Red Hat Quay flaw CVE-2026-123710, rated CVSS 9.8, lets attackers install a trusted signing key and read or overwrite any repository; fixes are merged upstream.
Zoom Patches Critical Workplace for Windows Flaw CVE-2026-108187
Zoom fixed two Workplace for Windows privilege-escalation flaws, CVE-2026-108187 and CVE-2026-108186, on November 11; the company reports no exploitation.
Chrome 157 Update Fixes 83 Flaws, Including Five Critical Bugs
Google Chrome 157 fixes 83 security flaws, five critical use-after-free bugs and 78 high-severity issues, with no exploitation reported for this release.
Telegram Patches Android Remote Code Execution Bug After V12 Demo
Telegram fixed an Android remote code execution flaw after security firm V12 showed a bot message opening Calculator; no CVE or attacks have been reported.
Public Exploit Released for Linux Kernel AF_UNIX Flaw CVE-2026-80521
Google kernelCTF published a working exploit for CVE-2026-80521, a CVSS 7.8 Linux kernel AF_UNIX use-after-free that gives any local user root access.
Over 35,000 Grok-Built Apps Found Open Online, Some Leaking Data
Claroc found 37,571 Grok-built apps online, 35,578 open without sign-in, some leaking staff and customer data from X, SpaceXSI and 30 other organizations.
Microsoft Patches Outlook Zero-Day CVE-2026-124194 in 1,000+ Fixes
Microsoft's November Patch Tuesday fixed more than 1,000 flaws and an exploited Outlook zero-day, CVE-2026-124194, that leaks NTLMv2 hashes to attackers.
SAP Patches Four CVSS 10.0 Flaws Including ICM2SHELL RCE
SAP's November Patch Day fixed 35 flaws, four rated CVSS 10.0, including unauthenticated RCE in ICM and Web Dispatcher dubbed ICM2SHELL and PROXYGATE.
Xen Orchestra Auth Bypass Exploited to Hijack XCP-ng Hosts
Attackers are exploiting a critical Xen Orchestra authentication bypass, VSA-2026-062, to gain admin control and possibly root on XCP-ng virtualization nodes.
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
Barracuda confirms attackers are chaining CVE-2026-116606 and CVE-2026-111560 to gain root on its security appliances, and CISA added both to its KEV catalog.
Git 2.56.1 Fixes Code Execution Flaw CVE-2026-111760 in Clones
Git 2.56.1 patches six vulnerabilities, including CVE-2026-111760, which can run attacker code when developers recursively clone a malicious repository.
SGLang RCE Flaw Exploited to Breach NEAR AI, 18 Agents Exposed
An attacker used a remote code execution flaw in the SGLang inference engine to breach NEAR AI, exposing 18 AI agents and about 100 Private ...
Public iOS Sandbox Escape ‘worse_query’ Threatens Wallet Keys
A public iOS exploit named worse_query could expose crypto seed phrases and private keys from other apps; Binance warned users and Apple has confirmed no ...
Apple iOS 27.2.1 Fixes iMessage Group Chat and Bluetooth Flaws
Apple's iOS 27.2.1 patches iMessage group chat flaws CVE-2026-113961 and CVE-2026-113960 plus nine Bluetooth and AirPlay pairing bugs; no exploitation known.
Fortinet Patches Eight Critical Flaws in FortiOS and FortiManager
Fortinet fixed eight critical vulnerabilities rated CVSS 9.0 to 9.8 across FortiOS, FortiManager, FortiAnalyzer and FortiSASE; six need no authentication.
Synology Patches 27 DSM Flaws, Including CVSS 9.8 SQL Injection
Synology fixed 27 DiskStation Manager flaws, including CVE-2026-76954, a pre-authentication SQL injection in the Auth API rated CVSS 9.8, with no workarounds.
Ivanti Patches Critical EPM SQL Injection and CSA Auth Flaw
Ivanti's November advisories fix 13 flaws, including a CVSS 9.8 Endpoint Manager SQL injection and a CVSS 9.4 Cloud Services Application authentication flaw.
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
Intel fixed more than 100 flaws across 24 advisories, including a TDX Migration Trust Domain RCE, while AMD patched about 100 CVEs, none rated critical ...
CISA Adds Cisco BroadWorks XXE Flaw to KEV as Telecom Hit
CISA added Cisco BroadWorks flaw CVE-2026-20320 to its KEV catalog after a Chinese-speaking actor used it against a European telecom and 13+ other orgs.
SignDrop Windows CLFS Zero-Day Exploit Published, No Patch
A researcher published SignDrop, a working exploit for an unpatched Windows CLFS flaw that lets a standard user reach SYSTEM and potentially disable AV and ...