Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
CISA warns of exploitation of OpenSSH, GPUStack, FreeSWITCH and IBM Aspera Faspex vulnerabilities
On November 9, 2026, CISA added four vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog affecting OpenSSH, GPUStack, SignalWire FreeSWITCH, ...
Google releases emergency Chrome 157 update as XML use-after-free vulnerability is already being exploited
Google has released an update to the stable Chrome channel to versions 157.0.8103.50/.51 for Windows and macOS and 157.0.8103.50 for ...
CVE-2026-124194 — Microsoft Outlook spoofing vulnerability with confirmed exploitation
Microsoft reports active exploitation of vulnerability CVE-2026-124194 in Microsoft Office Outlook. The issue belongs to the spoofing class: the product ...
Unpatched vulnerability in CryptoPayment Gateway WordPress plugin exposes wallet credentials
The critical vulnerability CVE-2026-81648 with a CVSS 10.0 score has been discovered in the CryptoPayment Gateway WordPress plugin versions 1.2.1 ...
Synology confirms ransomware attacks on NAS devices running outdated DiskStation Manager (DSM)
On October 29, 2026, Taiwanese company Synology confirmed that attackers are exploiting a vulnerability that was already fixed back in ...
Two vulnerabilities in Barracuda products enable root access through exploit chaining
Barracuda published a security advisory on November 2, 2026, describing two vulnerabilities in its products: a pre-authentication authorization bypass (CVE-2026-116606, ...
APT vulnerability allows replacing verified packages and executing code with root privileges
The critical CVE-2026-109518 vulnerability in the APT package manager allows an attacker who can intercept HTTP traffic between the client ...
CVE-2026-83844 vulnerability in Windows Paint: fix available only through Microsoft Store
Microsoft has released a fix for the CVE-2026-83844 vulnerability in Windows Paint, which allows remote execution of arbitrary code. The ...
CISA added WordPress Core vulnerability CVE-2026-119977 to the KEV catalog — what is known about exploitation
On November 3, 2026, CISA added vulnerability CVE-2026-119977 to the Known Exploited Vulnerabilities (KEV) catalog. The vulnerability affects WordPress Core ...
CVE-2026-98432: use-after-free in Linux kernel IPv4 TCP — patches, diverging severity ratings, and temporary mitigations
The CVE-2026-98432 vulnerability in the Linux kernel IPv4 TCP networking stack allows a remote unauthenticated attacker to achieve arbitrary code ...
