Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Two critical vulnerabilities in Collabora Online and Arista VeloCloud are being actively exploited
On October 23, 2026, CISA added two critical issues to the Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-110447 in Collabora Online ...
CVE-2026-111497: vulnerability in the Brotli decoder affects Node.js, Bun, Python, and Envoy
The CVE-2026-111497 vulnerability in Google’s Brotli compression decoder allows a buffer overflow write when processing specially crafted compressed data. Since ...
Fortinet investigates impact of critical PHP RCE vulnerability CVE-2026-109618 on 12 products
Fortinet has published security advisory FG-IR-26-186, announcing an investigation into the impact of a critical vulnerability in the PHP core ...
Six vulnerabilities in Plex Media Server, Siemens and SiteGuard added to the CISA KEV catalog with strict patching deadlines
On 20 October 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added new entries to the Known Exploited Vulnerabilities ...
Chrome 156 update fixes 353 vulnerabilities, including six critical — AI systems among the researchers
On 20 October 2026, Google released Chrome 156 for Windows, Mac and Linux, fixing 353 security vulnerabilities, six of which ...
Xerj Console API vulnerability enables creation of non-revocable credentials by bypassing passkey authentication
CERT/CC has published advisory VU#645818 describing an authentication bypass vulnerability in the console API of the Xerj search and indexing ...
ChromeOS M-156 update closes 12 critical Chrome browser vulnerabilities and dangerous kernel flaws
On 20 October 2026, Google released the ChromeOS M-156 update (version 16836.19.0, browser 156.0.8078.42) for the stable channel, according to ...
Public PoC exploit for critical FortiSIEM vulnerability enables unauthenticated remote code execution
Researchers at Horizon3.ai have released a working PoC exploit for the critical vulnerability CVE-2026-106173 in Fortinet FortiSIEM. This path traversal ...
PHP2Shell: emergency patches for two critical PHP vulnerabilities — what to do right now
On October 21, 2026, the PHP team released emergency updates for two critical remote code execution (RCE) vulnerabilities collectively dubbed ...
PHP2Shell: two critical remote code execution vulnerabilities in PHP — what is known and how to prepare
The PHP security team has announced two critical vulnerabilities with a CVSS v4.0 score of 9.2 and scheduled an out-of-band ...
