Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
SQL injection in FortiMail webmail — which versions are affected and how to update
On October 13, 2026, Fortinet published security advisory FG-IR-26-184, disclosing an SQL injection vulnerability (CVE-2025-57739) in the web interface of ...
FG-IR-26-178: multiple SQL injections in FortiAnalyzer and FortiManager allow arbitrary command execution
On 13 October 2026, Fortinet published advisory FG-IR-26-178 describing SQL injection (CWE-89) vulnerabilities in FortiAnalyzer, FortiManager and their cloud versions. ...
GhostPat — Docker Hub vulnerability that allowed controlling other users’ container images via Personal Access Tokens
Docker has fixed a critical vulnerability CVE-2026-105445 in Docker Hub that, for more than two years — from 26 August ...
Arbitrary File Write in FortiSIEM via Path Traversal — Fortinet CVSS 9.4 Assessment
Fortinet has published security advisory FG-IR-26-180 describing a critical path traversal vulnerability in FortiSIEM, a security information and event management ...
Microsoft’s October Patch Tuesday: Over 1,400 Vulnerabilities and an Exploited Flaw in Windows Shell
On 13 October 2026, Microsoft released a record-breaking Patch Tuesday security update bundle. Sources differ on the exact number of ...
CVE-2026-96951: critical command injection vulnerability in Windows Shell is already being exploited
CVE-2026-96951 is a command injection vulnerability in the Windows Shell component that Microsoft flags as actively exploited. The vulnerability allows ...
FortiSandbox GUI authentication bypass vulnerability: what is known and what actions to take
Fortinet has published security advisory FG-IR-26-185 describing an authentication bypass vulnerability in the FortiSandbox web management interface. The vulnerability has ...
Critical CVE-2026-97229 vulnerability in GitLab CE/EE allows unauthenticated code execution on the server
GitLab has released emergency updates to address CVE-2026-97229, a critical vulnerability with the maximum score of 10.0 on the CVSS ...
New critical SonicWall SMA 1000 vulnerability — the third this year, with signs of exploitation after patch release
A critical vulnerability CVE-2026-102255 — unauthenticated server-side request forgery (SSRF) — has been discovered in SonicWall SMA 1000 appliances. According ...
Anthropic warns about the risk of self-propagating AI worms targeting IoT devices
Anthropic has published a study describing a scenario for the emergence of self-propagating AI worms—small models capable of autonomously infecting ...
