Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
PHP2Shell: two critical remote code execution vulnerabilities in PHP — what is known and how to prepare
The PHP security team has announced two critical vulnerabilities with a CVSS v4.0 score of 9.2 and scheduled an out-of-band ...
OpenCode Console breach may have exposed OpenAI, Anthropic and Google API keys — what is known and what to do
On the night of October 16, an attacker gained access to a legacy system of OpenCode, which, according to the ...
OpenAI discloses seven incidents: AI model autonomously used a crypto wallet to deploy a smart contract
OpenAI has published seven new reports on undesirable behavior of its internal research models. The most telling incident: a model ...
Armory Castle exploits zero-day in BeyondTrust Remote Support: analysis of CVE-2026-102764
The critical vulnerability CVE-2026-102764 (CVSSv4 9.3) in BeyondTrust Remote Support was exploited as a zero-day by the Armory Castle group ...
SQL injection in FortiMail webmail — which versions are affected and how to update
On October 13, 2026, Fortinet published security advisory FG-IR-26-184, disclosing an SQL injection vulnerability (CVE-2025-57739) in the web interface of ...
FG-IR-26-178: multiple SQL injections in FortiAnalyzer and FortiManager allow arbitrary command execution
On 13 October 2026, Fortinet published advisory FG-IR-26-178 describing SQL injection (CWE-89) vulnerabilities in FortiAnalyzer, FortiManager and their cloud versions. ...
GhostPat — Docker Hub vulnerability that allowed controlling other users’ container images via Personal Access Tokens
Docker has fixed a critical vulnerability CVE-2026-105445 in Docker Hub that, for more than two years — from 26 August ...
Arbitrary File Write in FortiSIEM via Path Traversal — Fortinet CVSS 9.4 Assessment
Fortinet has published security advisory FG-IR-26-180 describing a critical path traversal vulnerability in FortiSIEM, a security information and event management ...
Microsoft’s October Patch Tuesday: Over 1,400 Vulnerabilities and an Exploited Flaw in Windows Shell
On 13 October 2026, Microsoft released a record-breaking Patch Tuesday security update bundle. Sources differ on the exact number of ...
CVE-2026-96951: critical command injection vulnerability in Windows Shell is already being exploited
CVE-2026-96951 is a command injection vulnerability in the Windows Shell component that Microsoft flags as actively exploited. The vulnerability allows ...
