Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Arbitrary File Write in FortiSIEM via Path Traversal — Fortinet CVSS 9.4 Assessment
Fortinet has published security advisory FG-IR-26-180 describing a critical path traversal vulnerability in FortiSIEM, a security information and event management ...
Microsoft’s October Patch Tuesday: Over 1,400 Vulnerabilities and an Exploited Flaw in Windows Shell
On 13 October 2026, Microsoft released a record-breaking Patch Tuesday security update bundle. Sources differ on the exact number of ...
CVE-2026-96951: critical command injection vulnerability in Windows Shell is already being exploited
CVE-2026-96951 is a command injection vulnerability in the Windows Shell component that Microsoft flags as actively exploited. The vulnerability allows ...
FortiSandbox GUI authentication bypass vulnerability: what is known and what actions to take
Fortinet has published security advisory FG-IR-26-185 describing an authentication bypass vulnerability in the FortiSandbox web management interface. The vulnerability has ...
Critical CVE-2026-97229 vulnerability in GitLab CE/EE allows unauthenticated code execution on the server
GitLab has released emergency updates to address CVE-2026-97229, a critical vulnerability with the maximum score of 10.0 on the CVSS ...
New critical SonicWall SMA 1000 vulnerability — the third this year, with signs of exploitation after patch release
A critical vulnerability CVE-2026-102255 — unauthenticated server-side request forgery (SSRF) — has been discovered in SonicWall SMA 1000 appliances. According ...
Anthropic warns about the risk of self-propagating AI worms targeting IoT devices
Anthropic has published a study describing a scenario for the emergence of self-propagating AI worms—small models capable of autonomously infecting ...
Key cybersecurity events of the first week of October 2026: arrests, vulnerabilities and new attack techniques
The first week of October 2026 was marked by several significant events: a third arrest in the ShinyHunters case, the ...
Critical vulnerability in SAP Cloud SDK for Python enables interception of OAuth2 credentials
SAP has disclosed a critical vulnerability CVE-2026-89111 with the maximum score of CVSS 10.0 in its Cloud SDK for Python, ...
Critical Cisco Catalyst SD-WAN Manager vulnerability is being actively exploited — CISA requires patching by October 3
On September 30, 2026, CISA added critical vulnerability CVE-2026-76504 in Cisco Catalyst SD-WAN Manager (vManage) to the Known Exploited Vulnerabilities ...
