Cyber Security
CVE Vulnerability Alerts
Mitsubishi Patches ICONICS Suite Flaws; Legacy Products Get No Fix
Mitsubishi Electric patched four ICONICS Suite flaws allowing authentication bypass and code execution, but MC Works64, GENESIS32 and BizViz will get no fixes.
Application Security
Progress Patches 12 High-Severity MOVEit Transfer Vulnerabilities
Progress fixed 12 high-severity MOVEit Transfer flaws, including authentication bypasses, in releases 2025.1.6 and 2026.0.4. No exploitation has been seen.
CVE Vulnerability Alerts
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
AWS patched CVE-2026-110812, a CVSS 9.9 unsafe deserialization flaw in Apache TinkerPop Gremlin that affects Amazon Neptune engine versions 1.2.0.0 and later.
Application Security
Backuply WordPress Plugin SQL Injection Enables Site Takeover
Wordfence disclosed CVE-2026-93953, a SQL injection in the Backuply WordPress plugin, with 600,000 installs, that can lead to rogue administrator accounts.
Cybersecurity
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS to enable LLMjacking.
Cybersecurity
X Removes 13,000 Accounts Tied to Foreign Influence Operations
X says it removed more than 13,000 accounts in three suspected foreign influence operations linked to Iran, Russia and China, ahead of the US midterm ...
Cybersecurity
GreyNoise: Proxyjacking Campaign Hijacks D-Link, Ubiquiti Devices
GreyNoise found a proxyjacking campaign that compromised at least 143 edge devices in 34 countries, installing Pawns.app to resell victims' bandwidth.
Cybersecurity
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial apps via fake traffic fine ...
CVE Vulnerability Alerts
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such zero-day since September.
CVE Vulnerability Alerts
Palo Alto Patches PAN-OS RCE Zero-Day CVE-2026-0322 Under Attack
Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE giving root access that is under limited exploitation, and CISA added it to KEV.
Cybersecurity
Microsoft Seizes Domains of Chinese Phishing Kits Behind 1B Messages
Microsoft, Health-ISAC and partners seized domains tied to the CoGUI, Haozi and Iron Man phishing kits and YAM Store, linked to over a billion scam ...
Application Security
Vercel Ships Next.js 16.4.1 Fixing Two Critical RCE Flaws
Vercel released Next.js 16.4.1 and 15.5.28 to fix two critical unauthenticated remote code execution flaws and a high-severity denial-of-service bug in apps.
Cybersecurity
North Macedonia Charges Alleged OLVX Marketplace Administrator
North Macedonia charged the alleged administrator of the OLVX cybercrime marketplace in the first FBI joint cyber operation with the country, officials said.
CVE Vulnerability Alerts
JPCERT/CC Warns SiteGuard WAF Flaw CVE-2026-106931 Is Exploited
JPCERT/CC warns attackers are exploiting CVE-2026-106931, an OS command injection in SiteGuard Server Edition WAF that grants root or SYSTEM privileges.
Application Security
Ahsay Issues New AhsayCBS Hotfixes After Earlier Patches Failed
Ahsay released new AhsayCBS hotfixes after its August patches did not fully close CVE-2026-105133 and CVE-2026-105134, and CISA added both flaws to KEV.
Cybersecurity
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own security checks.
Cybersecurity
ICO Reprimands Met Police Over Unvetted Use of Auror Platform
The UK ICO reprimanded the Metropolitan Police and issued an enforcement notice after officers used the Auror retail crime platform without data checks.
CVE Vulnerability Alerts
Juniper, Dell, NLnet Labs and SonicWall Patch Critical Flaws
Juniper, Dell, NLnet Labs and SonicWall released fixes for critical Junos OS, Wyse Management Suite, NSD and NSM On-Prem flaws; no exploitation is reported.
Application Security
curl 8.23.0 Fixes High-Severity HTTP/2 Flaw CVE-2026-92392
curl 8.23.0 fixes CVE-2026-92392, a High-severity HTTP/2 upload use-after-free that a researcher turned into code execution, plus 23 Low-severity CVEs.
Application Security
F5 Patches Three NGINX Memory-Corruption Flaws Enabling RCE
F5 patched three NGINX memory-corruption flaws, CVE-2026-97205, CVE-2026-93479 and CVE-2026-15176, rated CVSS 8.1 that could allow remote code execution.
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
This Week’s Security Spotlight
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Backuply WordPress Plugin SQL Injection Enables Site Takeover
Wordfence disclosed CVE-2026-93953, a SQL injection in the Backuply WordPress plugin, with 600,000 installs, that can lead to rogue administrator accounts.
Aoki Infostealer Now Steals API Keys From AI Coding Assistants
Symantec reports new Aoki infostealer variants that take credentials and session files from Claude, Codex, Cursor, Gemini, Copilot and AWS to enable LLMjacking.
X Removes 13,000 Accounts Tied to Foreign Influence Operations
X says it removed more than 13,000 accounts in three suspected foreign influence operations linked to Iran, Russia and China, ahead of the US midterm ...
GreyNoise: Proxyjacking Campaign Hijacks D-Link, Ubiquiti Devices
GreyNoise found a proxyjacking campaign that compromised at least 143 edge devices in 34 countries, installing Pawns.app to resell victims' bandwidth.
GhostBat Android RAT Targets 60 Indian Banking and UPI Apps
Cyble describes an updated GhostBat Android RAT that uses a Ghost Overlay to steal UPI PINs from 60 Indian financial apps via fake traffic fine ...
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such zero-day since September.
Palo Alto Patches PAN-OS RCE Zero-Day CVE-2026-0322 Under Attack
Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE giving root access that is under limited exploitation, and CISA added it to KEV.
Microsoft Seizes Domains of Chinese Phishing Kits Behind 1B Messages
Microsoft, Health-ISAC and partners seized domains tied to the CoGUI, Haozi and Iron Man phishing kits and YAM Store, linked to over a billion scam ...
Vercel Ships Next.js 16.4.1 Fixing Two Critical RCE Flaws
Vercel released Next.js 16.4.1 and 15.5.28 to fix two critical unauthenticated remote code execution flaws and a high-severity denial-of-service bug in apps.
North Macedonia Charges Alleged OLVX Marketplace Administrator
North Macedonia charged the alleged administrator of the OLVX cybercrime marketplace in the first FBI joint cyber operation with the country, officials said.
JPCERT/CC Warns SiteGuard WAF Flaw CVE-2026-106931 Is Exploited
JPCERT/CC warns attackers are exploiting CVE-2026-106931, an OS command injection in SiteGuard Server Edition WAF that grants root or SYSTEM privileges.
Ahsay Issues New AhsayCBS Hotfixes After Earlier Patches Failed
Ahsay released new AhsayCBS hotfixes after its August patches did not fully close CVE-2026-105133 and CVE-2026-105134, and CISA added both flaws to KEV.
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own security checks.
ICO Reprimands Met Police Over Unvetted Use of Auror Platform
The UK ICO reprimanded the Metropolitan Police and issued an enforcement notice after officers used the Auror retail crime platform without data checks.
Juniper, Dell, NLnet Labs and SonicWall Patch Critical Flaws
Juniper, Dell, NLnet Labs and SonicWall released fixes for critical Junos OS, Wyse Management Suite, NSD and NSM On-Prem flaws; no exploitation is reported.
curl 8.23.0 Fixes High-Severity HTTP/2 Flaw CVE-2026-92392
curl 8.23.0 fixes CVE-2026-92392, a High-severity HTTP/2 upload use-after-free that a researcher turned into code execution, plus 23 Low-severity CVEs.
F5 Patches Three NGINX Memory-Corruption Flaws Enabling RCE
F5 patched three NGINX memory-corruption flaws, CVE-2026-97205, CVE-2026-93479 and CVE-2026-15176, rated CVSS 8.1 that could allow remote code execution.
Check Point Finds Two Critical LiteLLM Flaws Enabling Key Theft
Check Point Research disclosed CVE-2026-35029 and CVE-2026-59823 in LiteLLM, flaws enabling admin takeover and theft of OpenAI, Anthropic and Google API keys.
Brooklyn DA and FBI Seize 241 Domains in Crypto Scam Takedown
Brooklyn District Attorney Eric Gonzalez and the FBI seized 241 domains and 112 servers behind a crypto investment scam aimed at Russian-speaking victims.
Unsecured Database Holds 13.7M Breach Records Tied to Vibetech
Researcher Jeremiah Fowler found an unsecured database of 13.7 million records tied to AT&T, Amazon, Walmart and PayPal, linked to India-based Vibetech.