Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Critical Cisco Catalyst SD-WAN Manager vulnerability is being actively exploited — CISA requires patching by October 3
On September 30, 2026, CISA added critical vulnerability CVE-2026-76504 in Cisco Catalyst SD-WAN Manager (vManage) to the Known Exploited Vulnerabilities ...
CVE-2026-86950: a public PoC appeared after Apple’s patch — what is known about the delivery vector via WhatsApp
On September 30, 2026, researchers from Calif published the first public proof-of-concept for the CVE-2026-86950 vulnerability — an out-of-bounds write ...
How Integrity Technology Group sold access to stolen Microsoft 365 and Exchange email
Since 2021, the China-linked company Integrity Technology Group, sanctioned by the US and the UK, has been systematically hacking the ...
Spike in personal data breaches in Japan due to attacks on APIs and Metabase
From July to September 2026, Japanese organizations faced a sharp increase in personal data breaches via web systems: according to ...
CVE-2026-56164: privilege escalation in Microsoft SharePoint without login
Microsoft has recorded exploitation of the privilege escalation vulnerability CVE-2026-56164 in Microsoft SharePoint Server, related to missing authentication for a ...
Claude incidents: why Anthropic shut off the internet for internal tests
Anthropic has temporarily disabled live internet access for all internal evaluations of its AI models after a series of incidents ...
CVE-2026-107406 in Citrix NetScaler: SAML configurations at risk of remote code execution
Citrix has released updates to address the critical CVE-2026-107406 vulnerability in NetScaler ADC and NetScaler Gateway. Under certain SAML settings ...
Remote code execution vulnerability in Microsoft SharePoint: risks and protection
CVE-2026-58644 is a remote code execution vulnerability in Microsoft SharePoint related to deserialization of untrusted data that is already being ...
Branch Target Reuse: how the new Spectre v2 variant hits JIT, the Linux kernel and sandboxes
Researchers have presented a new variant of the Spectre v2 class of attacks called Branch Target Reuse (BTR), which affects ...
Remote code execution in LMCache: risk for LLM clusters and multi-tenant environments
The critical CVE-2026-105192 vulnerability in LMCache, used to accelerate large language model servers such as vLLM, allows an unauthenticated remote ...
