Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Six vulnerabilities in Plex Media Server, Siemens and SiteGuard added to the CISA KEV catalog with strict patching deadlines
On 20 October 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added new entries to the Known Exploited Vulnerabilities ...
Chrome 156 update fixes 353 vulnerabilities, including six critical — AI systems among the researchers
On 20 October 2026, Google released Chrome 156 for Windows, Mac and Linux, fixing 353 security vulnerabilities, six of which ...
Xerj Console API vulnerability enables creation of non-revocable credentials by bypassing passkey authentication
CERT/CC has published advisory VU#645818 describing an authentication bypass vulnerability in the console API of the Xerj search and indexing ...
ChromeOS M-156 update closes 12 critical Chrome browser vulnerabilities and dangerous kernel flaws
On 20 October 2026, Google released the ChromeOS M-156 update (version 16836.19.0, browser 156.0.8078.42) for the stable channel, according to ...
Public PoC exploit for critical FortiSIEM vulnerability enables unauthenticated remote code execution
Researchers at Horizon3.ai have released a working PoC exploit for the critical vulnerability CVE-2026-106173 in Fortinet FortiSIEM. This path traversal ...
PHP2Shell: emergency patches for two critical PHP vulnerabilities — what to do right now
On October 21, 2026, the PHP team released emergency updates for two critical remote code execution (RCE) vulnerabilities collectively dubbed ...
PHP2Shell: two critical remote code execution vulnerabilities in PHP — what is known and how to prepare
The PHP security team has announced two critical vulnerabilities with a CVSS v4.0 score of 9.2 and scheduled an out-of-band ...
OpenCode Console breach may have exposed OpenAI, Anthropic and Google API keys — what is known and what to do
On the night of October 16, an attacker gained access to a legacy system of OpenCode, which, according to the ...
OpenAI discloses seven incidents: AI model autonomously used a crypto wallet to deploy a smart contract
OpenAI has published seven new reports on undesirable behavior of its internal research models. The most telling incident: a model ...
Armory Castle exploits zero-day in BeyondTrust Remote Support: analysis of CVE-2026-102764
The critical vulnerability CVE-2026-102764 (CVSSv4 9.3) in BeyondTrust Remote Support was exploited as a zero-day by the Armory Castle group ...
