Resources
China-Linked Armory Castle Exploited BeyondTrust Zero-Day
BeyondTrust patched CVE-2026-102764, a Remote Support zero-day that China-nexus group Armory Castle exploited since late August, per Mandiant and Google.
PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory
PwnEscape, tracked as CVE-2026-99999, lets code in a guest VM leak host memory and crash the host. Researchers demonstrated it against Vercel sandboxes.
Chrome 155 Patches 10 Flaws, Including Critical Prerender Bug
Google released Chrome 155.0.8059.84 with fixes for 10 flaws, including critical use-after-free CVE-2026-110922 in Prerender. No exploitation reported.
Mitsubishi Patches ICONICS Suite Flaws; Legacy Products Get No Fix
Mitsubishi Electric patched four ICONICS Suite flaws allowing authentication bypass and code execution, but MC Works64, GENESIS32 and BizViz will get no fixes.
Progress Patches 12 High-Severity MOVEit Transfer Vulnerabilities
Progress fixed 12 high-severity MOVEit Transfer flaws, including authentication bypasses, in releases 2025.1.6 and 2026.0.4. No exploitation has been seen.
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
AWS patched CVE-2026-110812, a CVSS 9.9 unsafe deserialization flaw in Apache TinkerPop Gremlin that affects Amazon Neptune engine versions 1.2.0.0 and later.
Backuply WordPress Plugin SQL Injection Enables Site Takeover
Wordfence disclosed CVE-2026-93953, a SQL injection in the Backuply WordPress plugin, with 600,000 installs, that can lead to rogue administrator accounts.
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such zero-day since September.
Palo Alto Patches PAN-OS RCE Zero-Day CVE-2026-0322 Under Attack
Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE giving root access that is under limited exploitation, and CISA added it to KEV.
Vercel Ships Next.js 16.4.1 Fixing Two Critical RCE Flaws
Vercel released Next.js 16.4.1 and 15.5.28 to fix two critical unauthenticated remote code execution flaws and a high-severity denial-of-service bug in apps.
Weekly Newsletter
Weekly Cybersecurity Newsletter: 14th to 18th August
Explore our latest cybersecurity podcast episodes featuring ransomware attacks, phishing campaigns, corporate breaches, legal showdowns, and deep dives into evolving threats and digital defenses.
This Week In Cybersecurity: 23rd June to 27th June
News Stories New ‘FileFix’ Attack Exploits Windows File Explorer to Deliver Stealthy Commands Threat actors use the search-ms URI protocol ...
This Week In Cybersecurity: 26th to 30th May, 2025
"Cybersecurity threats escalate as ransomware attacks target major organizations, exposing sensitive data and highlighting vulnerabilities in systems across various industries. Stay informed."
This Week In Cybersecurity: 19th to 23rd May, 2025
This week, significant cybersecurity incidents include ransomware attacks, data breaches affecting major organizations, and ongoing threats from state-sponsored groups, highlighting vulnerabilities across various sectors.
This Week In Cybersecurity: 21st – 25th April, 2025
Targeted malware, ransomware, phishing, and ad fraud hit SK Telecom, Baltimore schools, Google, and more this week—exposing critical data and abusing trusted systems.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.