Cyber Security
Application Security
Polymarket Halts Trading After Hacked DebugBear Script Drains Wallets
Attackers compromised DebugBear's monitoring script to serve crypto-draining code on Polymarket, with about $2.5 million traced as stolen from trader wallets.
Cybersecurity
Cyberattack Knocks Belgium’s MyMinfin Tax Portal Offline
Belgium's FPS Finance confirmed a cyberattack and pulled several digital services offline, including MyMinfin, and pushed one tax filing deadline to November 16.
Application Security
TeamViewer Flaw CVE-2026-111585 Lets Hosts Hijack Technicians
A CVSS 8.8 integer overflow in TeamViewer's viewer lets a malicious remote host crash or run code on a support technician's Windows, macOS, Linux or ...
Application Security
Progress Patches 15 WS_FTP Server Flaws, Including CVSS 10.0 Bug
Progress fixed 15 WS_FTP Server vulnerabilities, led by CVE-2026-84295, a CVSS 10.0 authentication flaw that exposes administrative credentials to attackers.
AI Security
ServiceNow Patches Critical AI Platform Sandbox Escape Flaw
ServiceNow fixed CVE-2026-103093, a critical Rhino sandbox bypass that lets an authenticated admin run code on the host OS, plus two other flaws in KB3228994.
CVE Vulnerability Alerts
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a phone when a user answers ...
AI Security
Researcher Finds 26,400 Live Cloud and AI Keys on Gitee
Researcher Ben Zimmermann scanned 7.25 million public Gitee repositories and found about 26,400 working cloud and AI credentials, led by Alibaba Cloud keys.
AI Security
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more than 32,000 downloads.
AI Security
EMBRACE Flaws in Cursor, Codex, VS Code Allow File Theft
Forever Security's EMBRACE research found embedded-browser flaws in Cursor, Copilot, Codex, VS Code and Claude Desktop; Codex and VS Code remain unpatched.
Application Security
Chrome 156 Update Fixes 21 Flaws, Including Critical MediaStream Bug
Google's Chrome 156 update fixes 21 vulnerabilities, including critical MediaStream memory corruption bug CVE-2026-76024, with no exploitation reported.
Cybersecurity
GM Pays $220 Million to Settle 36-State Driver Data Suit
General Motors agreed to pay $220 million to 36 state attorneys general over the sale of driver location and driving data to brokers that resold ...
CVE Vulnerability Alerts
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
CVE Vulnerability Alerts
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
Cybersecurity
Volt Typhoon’s Silent Train Relay Network Ran Four Zero-Day Attacks
Lumen's Black Lotus Labs says Volt Typhoon used a covert relay network called Silent Train to run four zero-day campaigns against hundreds of victims.
Application Security
Kerio Connect Webmail XSS CVE-2026-112353 Exploited via SVG Files
Proofpoint observed attackers exploiting Kerio Connect webmail flaw CVE-2026-112353 with crafted SVG attachments to steal user credentials and mailbox contents.
Application Security
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen in the wild.
CVE Vulnerability Alerts
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Application Security
Apache Kafka JWT Bypass CVE-2026-110985 Among 12 Fixed Flaws
Apache Kafka fixed 12 vulnerabilities, including CVE-2026-110985, a JWT validation bypass that lets unauthenticated attackers forge tokens for any user.
Cybersecurity
Yoba Campaign Hides XMRig Miner Behind Signed ChatGPT, Claude Files
Check Point says the Yoba campaign used fake GitHub pages for nonexistent AI apps to deliver an XMRig miner through signed OpenAI and Anthropic executables.
Cybersecurity
Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a full OS reset.
TOP CYBERSECURITY HEADLINES
Application Security
Rails Patches 21 Flaws, Including CVSS 9.8 Active Storage Bug
Application Security
JPCERT/CC Warns Airbyte CVSS 9.9 Flaw Is Exploited in the Wild
Application Security
Public Exploit Released for Puppet Server RCE CVE-2026-115731
CVE Vulnerability Alerts
SonicWall Says Retire GMS as Two Critical Flaws Stay Unpatched
This Week’s Security Spotlight
CVE Vulnerability Alerts
Barracuda Flaws Chain Into Root Access on Email Security Gateway
CVE Vulnerability Alerts
Dell Fixes 44 PowerStore Flaws in DSA-2026-479, Seven Rated 9.8
Cybersecurity
Binance Loses About $6.3 Billion in Record Crypto Heist
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Progress Patches 15 WS_FTP Server Flaws, Including CVSS 10.0 Bug
Progress fixed 15 WS_FTP Server vulnerabilities, led by CVE-2026-84295, a CVSS 10.0 authentication flaw that exposes administrative credentials to attackers.
ServiceNow Patches Critical AI Platform Sandbox Escape Flaw
ServiceNow fixed CVE-2026-103093, a critical Rhino sandbox bypass that lets an authenticated admin run code on the host OS, plus two other flaws in KB3228994.
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a phone when a user answers ...
Researcher Finds 26,400 Live Cloud and AI Keys on Gitee
Researcher Ben Zimmermann scanned 7.25 million public Gitee repositories and found about 26,400 working cloud and AI credentials, led by Alibaba Cloud keys.
Hugging Face Mining Malware Returns, Model Hits 28,000 Downloads
Pluto Security found 31 malicious Hugging Face repositories posing as Qwen2 checkpoints that hijack GPUs for crypto mining, with more than 32,000 downloads.
EMBRACE Flaws in Cursor, Codex, VS Code Allow File Theft
Forever Security's EMBRACE research found embedded-browser flaws in Cursor, Copilot, Codex, VS Code and Claude Desktop; Codex and VS Code remain unpatched.
Chrome 156 Update Fixes 21 Flaws, Including Critical MediaStream Bug
Google's Chrome 156 update fixes 21 vulnerabilities, including critical MediaStream memory corruption bug CVE-2026-76024, with no exploitation reported.
GM Pays $220 Million to Settle 36-State Driver Data Suit
General Motors agreed to pay $220 million to 36 state attorneys general over the sale of driver location and driving data to brokers that resold ...
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
Volt Typhoon’s Silent Train Relay Network Ran Four Zero-Day Attacks
Lumen's Black Lotus Labs says Volt Typhoon used a covert relay network called Silent Train to run four zero-day campaigns against hundreds of victims.
Kerio Connect Webmail XSS CVE-2026-112353 Exploited via SVG Files
Proofpoint observed attackers exploiting Kerio Connect webmail flaw CVE-2026-112353 with crafted SVG attachments to steal user credentials and mailbox contents.
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen in the wild.
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Apache Kafka JWT Bypass CVE-2026-110985 Among 12 Fixed Flaws
Apache Kafka fixed 12 vulnerabilities, including CVE-2026-110985, a JWT validation bypass that lets unauthenticated attackers forge tokens for any user.
Yoba Campaign Hides XMRig Miner Behind Signed ChatGPT, Claude Files
Check Point says the Yoba campaign used fake GitHub pages for nonexistent AI apps to deliver an XMRig miner through signed OpenAI and Anthropic executables.
Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a full OS reset.
Hacktivists Leak Data on 41,000 DHS Staff, Claim Okta SSO Breach
A leak site carries internal data on more than 41,000 DHS employees and contractors. The Department of Peace claims an Okta SSO source; Okta denies ...
Japan Airlines Says Amadeus Breach Exposed 92,000 Customers
Japan Airlines says hackers accessed reservation data held by provider Amadeus, exposing details of 92,000 customers, including passport numbers for 2,000.
Sony Network Communications Breach Exposes 2.58 Million Records
Sony Network Communications says an October 19 intrusion exposed 2,585,481 So-net and plala records, including Docomo Hikari customers, and 54,401 email accounts.