Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Apple releases updates for critical vulnerabilities in iMessage, Bluetooth and the Brotli library
On November 9, 2026, Apple released a series of security updates that fix eight vulnerabilities in iMessage, Bluetooth, AirPlay and ...
CVE-2026-20320 in Cisco BroadWorks: what is known about the vulnerability and the controversies around its exploitation
The Hacker News reported that CISA had added two vulnerabilities — in Cisco BroadWorks and Openwave Messaging Webtop Media Transcoder ...
Microsoft patches over a thousand vulnerabilities — Outlook bug leaking NTLMv2 hashes already used by attackers
Microsoft’s November Patch Tuesday is the second consecutive update with more than a thousand fixes. The main threat is the ...
CISA warns of exploitation of OpenSSH, GPUStack, FreeSWITCH and IBM Aspera Faspex vulnerabilities
On November 9, 2026, CISA added four vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog affecting OpenSSH, GPUStack, SignalWire FreeSWITCH, ...
Google releases emergency Chrome 157 update as XML use-after-free vulnerability is already being exploited
Google has released an update to the stable Chrome channel to versions 157.0.8103.50/.51 for Windows and macOS and 157.0.8103.50 for ...
CVE-2026-124194 — Microsoft Outlook spoofing vulnerability with confirmed exploitation
Microsoft reports active exploitation of vulnerability CVE-2026-124194 in Microsoft Office Outlook. The issue belongs to the spoofing class: the product ...
Unpatched vulnerability in CryptoPayment Gateway WordPress plugin exposes wallet credentials
The critical vulnerability CVE-2026-81648 with a CVSS 10.0 score has been discovered in the CryptoPayment Gateway WordPress plugin versions 1.2.1 ...
Synology confirms ransomware attacks on NAS devices running outdated DiskStation Manager (DSM)
On October 29, 2026, Taiwanese company Synology confirmed that attackers are exploiting a vulnerability that was already fixed back in ...
Two vulnerabilities in Barracuda products enable root access through exploit chaining
Barracuda published a security advisory on November 2, 2026, describing two vulnerabilities in its products: a pre-authentication authorization bypass (CVE-2026-116606, ...
APT vulnerability allows replacing verified packages and executing code with root privileges
The critical CVE-2026-109518 vulnerability in the APT package manager allows an attacker who can intercept HTTP traffic between the client ...
