Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
VMware ESX logging vulnerability exploited as a zero-day — CISA requires patching by November 11
CVE-2026-41709, an insufficient logging vulnerability in VMware ESX, was added by CISA to the Known Exploited Vulnerabilities catalog on October ...
Critical vulnerability in Drupal Commerce Core exploited in the wild — updates and guidance
Drupal has published a security advisory about the CVE-2026-118539 vulnerability in the Commerce Core module, which provides online store functionality ...
Attack on Alpine Linux GitLab via CVE-2026-97229: why updating GitLab didn’t fix the vulnerability
The critical vulnerability CVE-2026-97229 (CVSS 10.0) in the Onigmo regular expression engine embedded in Ruby was used to attack the ...
Critical GitLab RCE and Cisco Firewall DoS added to CISA KEV catalog after confirmed exploitation
On October 29, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to the Known Exploited Vulnerabilities ...
Cisco patches actively exploited SSL VPN vulnerability and reveals APT campaign against SD-WAN
Cisco has released security updates for CVE-2026-76418, a high-severity vulnerability (CVSS 8.6) in Secure Firewall ASA and FTD software that, ...
KeyDrift malware extracts encryption keys from compromised Cisco SD-WAN controllers
The critical vulnerability CVE-2026-20127 (CVSS 10.0) in the management components of Cisco Catalyst SD-WAN has been used to install the ...
Critical vulnerability in Canonical LXD and MicroCloud lets attackers impersonate a trusted client
Canonical has released patches for CVE-2026-112816, a critical vulnerability in LXD and MicroCloud that allows an attacker to authenticate as ...
CISA adds two Ivanti Connect Secure vulnerabilities to KEV that are used in an exploit chain to obtain root access
On October 30, 2026, CISA added two Ivanti Connect Secure vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog. Vulnerabilities CVE-2026-111357 ...
PHP2Shell — millions of exploitation attempts for CVE-2026-109618 and CVE-2026-109619 have not yet led to confirmed compromises
Two critical vulnerabilities in the PHP core — CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2) — triggered a wave of scanning ...
CVE-2026-111497 in the Brotli decoder: PHP and Microsoft release emergency updates
The critical vulnerability CVE-2026-111497 in Google’s Brotli decoder continues to trigger a wave of emergency updates. After the initial patches ...
