Cyber Security
CVE Vulnerability Alerts
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
CVE Vulnerability Alerts
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
Cybersecurity
Volt Typhoon’s Silent Train Relay Network Ran Four Zero-Day Attacks
Lumen's Black Lotus Labs says Volt Typhoon used a covert relay network called Silent Train to run four zero-day campaigns against hundreds of victims.
Application Security
Kerio Connect Webmail XSS CVE-2026-112353 Exploited via SVG Files
Proofpoint observed attackers exploiting Kerio Connect webmail flaw CVE-2026-112353 with crafted SVG attachments to steal user credentials and mailbox contents.
Application Security
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen in the wild.
CVE Vulnerability Alerts
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Application Security
Apache Kafka JWT Bypass CVE-2026-110985 Among 12 Fixed Flaws
Apache Kafka fixed 12 vulnerabilities, including CVE-2026-110985, a JWT validation bypass that lets unauthenticated attackers forge tokens for any user.
Cybersecurity
Yoba Campaign Hides XMRig Miner Behind Signed ChatGPT, Claude Files
Check Point says the Yoba campaign used fake GitHub pages for nonexistent AI apps to deliver an XMRig miner through signed OpenAI and Anthropic executables.
Cybersecurity
Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a full OS reset.
Cybersecurity
Hacktivists Leak Data on 41,000 DHS Staff, Claim Okta SSO Breach
A leak site carries internal data on more than 41,000 DHS employees and contractors. The Department of Peace claims an Okta SSO source; Okta denies ...
Cybersecurity
Japan Airlines Says Amadeus Breach Exposed 92,000 Customers
Japan Airlines says hackers accessed reservation data held by provider Amadeus, exposing details of 92,000 customers, including passport numbers for 2,000.
Cybersecurity
Sony Network Communications Breach Exposes 2.58 Million Records
Sony Network Communications says an October 19 intrusion exposed 2,585,481 So-net and plala records, including Docomo Hikari customers, and 54,401 email accounts.
AI Security
123 Reg Says AI-Driven Attack Hit Customer Data, Points to China
UK registrar 123 Reg told customers an AI-driven attack exposed contact and product data, and suspects a China-nexus group tied to ARTEX intrusions in Korea.
CVE Vulnerability Alerts
16-Year-Old EDK II PXE Flaw CVE-2026-97631 Runs Code Pre-Boot
A critical buffer overflow in TianoCore EDK II PXE code, CVE-2026-97631, can run code before Secure Boot loads, and no stable release contains a fix ...
Cybersecurity
GMO Offers $1M Bounty After Onamae Desktop Cloud Data Leak
GMO Internet told Onamae Desktop Cloud customers to power off PCs after attackers leaked data, then opened a bounty of up to $1 million for ...
Cybersecurity
FBI Seizes Virtualine Bulletproof Hosting Domain in Takedown
The Justice Department seized virtualine.net, a bulletproof hosting provider used for phishing, carding and illegal content, with European and private partners.
Application Security
Attackers Probe Oracle EBS SQL Injection CVE-2026-101767
Defused saw exploratory attacks on its decoys against CVE-2026-101767, a CVSS 9.8 unauthenticated SQL injection in Oracle E-Business Suite patched last week.
AI Security
LiteLLM Patches CVSS 10.0 Flaw Exposing Proxy Master Key
BerriAI fixed a CVSS 10.0 LiteLLM proxy flaw that lets unauthenticated attackers read local files and steal the master key on Enterprise-licensed deployments.
Application Security
Magecart Group Hijacks Convertr Analytics Script to Skim Cards
A Brazilian Magecart gang altered Convertr's Plausible analytics script on checkout pages to steal card data and CPF taxpayer IDs from shoppers, Sansec reports.
Cybersecurity
ENGIE Confirms French Customer Data Stolen via Partner Platform
ENGIE says attackers breached a partner marketing tool and stole names, addresses and contract numbers of French customers; internal IT systems were not hit.
TOP CYBERSECURITY HEADLINES
Application Security
Microsoft Patches Paint Remote Code Execution Flaw CVE-2026-83844
Application Security
Apache OFBiz 24.09.08 Fixes 46 Flaws, Including Unauthenticated RCE
This Week’s Security Spotlight
CVE Vulnerability Alerts
Citrix Fixes CVSS 9.8 XenServer Flaw and Brotli Bug in Scout
CVE Vulnerability Alerts
ASUS Patches AiCloud Root Flaw CVE-2026-84730 in Four Alerts
CVE Vulnerability Alerts
Barracuda Flaws Chain Into Root Access on Email Security Gateway
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Kerio Connect Webmail XSS CVE-2026-112353 Exploited via SVG Files
Proofpoint observed attackers exploiting Kerio Connect webmail flaw CVE-2026-112353 with crafted SVG attachments to steal user credentials and mailbox contents.
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen in the wild.
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Apache Kafka JWT Bypass CVE-2026-110985 Among 12 Fixed Flaws
Apache Kafka fixed 12 vulnerabilities, including CVE-2026-110985, a JWT validation bypass that lets unauthenticated attackers forge tokens for any user.
Yoba Campaign Hides XMRig Miner Behind Signed ChatGPT, Claude Files
Check Point says the Yoba campaign used fake GitHub pages for nonexistent AI apps to deliver an XMRig miner through signed OpenAI and Anthropic executables.
Fake FedEx Tax PDFs Deliver Sirius Backdoor That Survives Reset
Trellix details a Korean-language phishing campaign posing as FedEx that delivers a fileless Sirius Backdoor designed to persist through a full OS reset.
Hacktivists Leak Data on 41,000 DHS Staff, Claim Okta SSO Breach
A leak site carries internal data on more than 41,000 DHS employees and contractors. The Department of Peace claims an Okta SSO source; Okta denies ...
Japan Airlines Says Amadeus Breach Exposed 92,000 Customers
Japan Airlines says hackers accessed reservation data held by provider Amadeus, exposing details of 92,000 customers, including passport numbers for 2,000.
Sony Network Communications Breach Exposes 2.58 Million Records
Sony Network Communications says an October 19 intrusion exposed 2,585,481 So-net and plala records, including Docomo Hikari customers, and 54,401 email accounts.
123 Reg Says AI-Driven Attack Hit Customer Data, Points to China
UK registrar 123 Reg told customers an AI-driven attack exposed contact and product data, and suspects a China-nexus group tied to ARTEX intrusions in Korea.
16-Year-Old EDK II PXE Flaw CVE-2026-97631 Runs Code Pre-Boot
A critical buffer overflow in TianoCore EDK II PXE code, CVE-2026-97631, can run code before Secure Boot loads, and no stable release contains a fix ...
GMO Offers $1M Bounty After Onamae Desktop Cloud Data Leak
GMO Internet told Onamae Desktop Cloud customers to power off PCs after attackers leaked data, then opened a bounty of up to $1 million for ...
FBI Seizes Virtualine Bulletproof Hosting Domain in Takedown
The Justice Department seized virtualine.net, a bulletproof hosting provider used for phishing, carding and illegal content, with European and private partners.
Attackers Probe Oracle EBS SQL Injection CVE-2026-101767
Defused saw exploratory attacks on its decoys against CVE-2026-101767, a CVSS 9.8 unauthenticated SQL injection in Oracle E-Business Suite patched last week.
LiteLLM Patches CVSS 10.0 Flaw Exposing Proxy Master Key
BerriAI fixed a CVSS 10.0 LiteLLM proxy flaw that lets unauthenticated attackers read local files and steal the master key on Enterprise-licensed deployments.
Magecart Group Hijacks Convertr Analytics Script to Skim Cards
A Brazilian Magecart gang altered Convertr's Plausible analytics script on checkout pages to steal card data and CPF taxpayer IDs from shoppers, Sansec reports.
ENGIE Confirms French Customer Data Stolen via Partner Platform
ENGIE says attackers breached a partner marketing tool and stole names, addresses and contract numbers of French customers; internal IT systems were not hit.
Nefilim and Hive Ransomware Affiliate Stryzhak Gets 70 Months
Ukrainian national Artem Stryzhak, 36, was sentenced to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware operations.
Italy’s Chamber of Deputies Confirms Email Accounts Targeted
Italy's Chamber of Deputies confirmed its IT systems were targeted, with reports naming three email accounts including one assigned to Giorgia Meloni.
Adobe Patches Nine Critical Flaws in Campaign Classic, Connect
Adobe fixed nine critical vulnerabilities in Campaign Classic and Connect, led by CVE-2026-105781, a CVSS 10.0 SQL injection, in two October bulletins.