Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Unauthenticated command execution in Bifrost via MCP client registration
Two vulnerabilities have been discovered in the open AI gateway Bifrost, which routes requests to more than 20 large language ...
Active exploitation of vulnerabilities in Zyxel GS1900 switches and Veeam Agent for Windows
On 21 September 2026, CISA added the critical CVE-2026-7273 vulnerability in Zyxel GS1900 switches to the Known Exploited Vulnerabilities (KEV) ...
Critical CVE-2026-93952 vulnerability in VeloCloud Orchestrator is being actively exploited — patches are not available for all versions
On 22 September 2026, Arista published Security Advisory 0183 describing the critical vulnerability CVE-2026-93952 in VeloCloud Orchestrator On-Prem — the ...
Libheif vulnerability allowed researchers to access OpenAI employee accounts via the forum
The CVE-2026-32882 vulnerability in the image-processing library libheif became a key link in an attack chain that, according to research ...
Microsoft fixes critical Azure AI Foundry vulnerability and five other serious bugs
Microsoft has announced that it has fixed six vulnerabilities, including CVE-2026-85889 with a maximum CVSS score of 10.0 in the ...
Click2Shell vulnerability in WordPress allows installing a theme without the administrator’s knowledge
On September 17, 2026, WordPress released version 7.1.1 — an emergency security update that fixes a vulnerability allowing a specially ...
TanStack supply chain attack led to copying of 170 private CrowdSec GitHub repositories
On 11 May 2026, 84 malicious versions of 42 @tanstack/* packages were published to the npm registry — a supply ...
Hard-coded JWT key in Issabel Framework enables operating system command execution without authentication
A vulnerability CVE-2026-89026 has been discovered in the Issabel Framework web framework used to manage Asterisk-based PBX systems, allowing an ...
Cisco ISE: critical authentication bypass vulnerability exploited in attacks — patches and guidance
Cisco has published an alert about a critical vulnerability, CVE-2026-76460 (CVSS 10.0), in Identity Services Engine (ISE) and ISE Passive ...
SolarWinds fixes remote code execution vulnerability in Access Rights Manager caused by hard-coded key
On 17 September 2026, SolarWinds published a security advisory on vulnerability CVE-2026-28326 — a flaw in Access Rights Manager (ARM) ...
