Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Critical GitLab RCE and Cisco Firewall DoS added to CISA KEV catalog after confirmed exploitation
On October 29, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to the Known Exploited Vulnerabilities ...
Cisco patches actively exploited SSL VPN vulnerability and reveals APT campaign against SD-WAN
Cisco has released security updates for CVE-2026-76418, a high-severity vulnerability (CVSS 8.6) in Secure Firewall ASA and FTD software that, ...
KeyDrift malware extracts encryption keys from compromised Cisco SD-WAN controllers
The critical vulnerability CVE-2026-20127 (CVSS 10.0) in the management components of Cisco Catalyst SD-WAN has been used to install the ...
Critical vulnerability in Canonical LXD and MicroCloud lets attackers impersonate a trusted client
Canonical has released patches for CVE-2026-112816, a critical vulnerability in LXD and MicroCloud that allows an attacker to authenticate as ...
CISA adds two Ivanti Connect Secure vulnerabilities to KEV that are used in an exploit chain to obtain root access
On October 30, 2026, CISA added two Ivanti Connect Secure vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog. Vulnerabilities CVE-2026-111357 ...
PHP2Shell — millions of exploitation attempts for CVE-2026-109618 and CVE-2026-109619 have not yet led to confirmed compromises
Two critical vulnerabilities in the PHP core — CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2) — triggered a wave of scanning ...
CVE-2026-111497 in the Brotli decoder: PHP and Microsoft release emergency updates
The critical vulnerability CVE-2026-111497 in Google’s Brotli decoder continues to trigger a wave of emergency updates. After the initial patches ...
Fortinet investigates the impact of 10 Node.js vulnerabilities on its product line — CVE-2026-111497 already in CISA KEV
On October 26, 2026, Fortinet published advisory FG-IR-26-187, which lists ten Node.js vulnerabilities affecting the 22.x, 24.x and 26.x branches. ...
CISA adds PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 to KEV: active exploitation confirmed
On October 26, 2026, CISA added two critical PHP vulnerabilities — CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell — to ...
PHP warns of new remote code execution vulnerability CVE-2026-115560 two days after emergency PHP2Shell fixes
On October 23, the PHP Foundation published an information notice about a new remote code execution vulnerability — CVE-2026-115560. The ...
