Resources
Canonical Patches CVSS 10.0 LXD Flaw Letting Attackers Spoof Clients
Canonical fixed CVE-2026-112816, a CVSS 10.0 LXD and MicroCloud flaw that lets attackers authenticate as a trusted client using only its public certificate.
Rapid7 Releases Metasploit Module for BeyondTrust CVE-2026-102764
Rapid7 published a technical analysis and a working Metasploit module for CVE-2026-102764, a BeyondTrust Remote Support flaw already exploited in attacks.
Dell Fixes 44 PowerStore Flaws in DSA-2026-479, Seven Rated 9.8
Dell's DSA-2026-479 patches 44 PowerStore vulnerabilities, including seven rated CVSS 9.8 in the SDNAS file services layer. Upgrade to OS 5.1.0.0-2798105.
MediaTek November Bulletin Fixes 57 Flaws, Six Critical Modem Bugs
MediaTek's November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio contact.
Apache Wicket Discloses 19 Vulnerabilities Across Three Release Lines
Apache Wicket disclosed 19 vulnerabilities across versions 8.x, 9.x and 10.x, including XSS, missing authorization and upload DoS bugs. Upgrade to 10.12.0.
Public Exploit Targets Linux Bonding Driver Flaw CVE-2026-31419
A public exploit for CVE-2026-31419, a Linux kernel bonding driver race condition, demonstrates root and container escape on Google's Container-Optimized OS.
Drupal Commerce Core Auth Bypass CVE-2026-118539 Under Attack
Drupal warns attackers are exploiting CVE-2026-118539, a missing-authorization flaw in Commerce Core that allows an access bypass on affected online stores.
WordPress 7.1.4 Fixes Core RCE Flaw Attackers Are Probing
Wordfence logged more than 18,500 malicious requests in 21 hours against a WordPress Core upgrade flaw. WordPress 7.1.4 randomizes the staging directory.
Cisco Patches Exploited ASA/FTD VPN Zero-Day CVE-2026-76418
Cisco fixed CVE-2026-76418, a zero-day that crashes ASA and FTD SSL VPN devices. CISA added it and a GitLab RCE to KEV with a November ...
TeamViewer Flaw CVE-2026-111585 Lets Hosts Hijack Technicians
A CVSS 8.8 integer overflow in TeamViewer's viewer lets a malicious remote host crash or run code on a support technician's Windows, macOS, Linux or ...
Weekly Newsletter
Weekly Cybersecurity Newsletter: 14th to 18th August
Explore our latest cybersecurity podcast episodes featuring ransomware attacks, phishing campaigns, corporate breaches, legal showdowns, and deep dives into evolving threats and digital defenses.
This Week In Cybersecurity: 23rd June to 27th June
News Stories New ‘FileFix’ Attack Exploits Windows File Explorer to Deliver Stealthy Commands Threat actors use the search-ms URI protocol ...
This Week In Cybersecurity: 26th to 30th May, 2025
"Cybersecurity threats escalate as ransomware attacks target major organizations, exposing sensitive data and highlighting vulnerabilities in systems across various industries. Stay informed."
This Week In Cybersecurity: 19th to 23rd May, 2025
This week, significant cybersecurity incidents include ransomware attacks, data breaches affecting major organizations, and ongoing threats from state-sponsored groups, highlighting vulnerabilities across various sectors.
This Week In Cybersecurity: 21st – 25th April, 2025
Targeted malware, ransomware, phishing, and ad fraud hit SK Telecom, Baltimore schools, Google, and more this week—exposing critical data and abusing trusted systems.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.