Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
How Unicode Tags Help a Mass Phishing Campaign Bypass Email Security
Microsoft has recorded a large-scale phishing campaign in which attackers insert invisible characters from the Unicode Tags block (U+E0000–U+E007F) into ...
How CVE-2026-6471 Impacts PostgreSQL Logical Replication
PostgreSQL has released security updates that fix the CVE-2026-6471 vulnerability (CVSS 7.2) in the logical decoding mechanism. The flaw allows ...
CERT Polska Warns of Active Attacks on MikroTik RouterOS Devices
CERT Polska published a warning about active exploitation of vulnerabilities in MikroTik RouterOS that allow attackers to gain full administrative ...
Major Chrome 153 security update fixes 230 vulnerabilities, including 5 critical flaws in WebGL and Cast
On September 8, 2026, Google released the stable version of Chrome 153 (153.0.8010.36 for Linux, 153.0.8010.36/.37 for Windows and Mac) ...
PaperCut MF/NG auth bypass and RCE vulnerabilities under attack
Two recently disclosed vulnerabilities in PaperCut MF/NG — CVE-2026-81578 (authentication bypass, CVSS v4.0: 8.8) and CVE-2026-82078 (remote code execution, CVSS ...
RCE Attacks via Super Forms and Elementor Pro File Upload Bugs
Two critical vulnerabilities in the popular WordPress plugins Super Forms (CVE-2026-14894, CVSS 9.8) and Elementor Pro (CVE-2026-32475, CVSS 9.8) are ...
CVE-2026-85046: Actively Exploited V8 Zero-Day in Google Chrome
On September 3, 2026, Google released an update to the stable Chrome channel for desktop platforms, addressing 12 vulnerabilities, including ...
Guidance on Cisco Nexus 9000 and IOS XR Security Updates
On 2 September 2026, Cisco released patches for critical vulnerability CVE-2026-20212 (CVSS 9.8) in ten Silicon One–based Nexus 9000 switch ...
How BraZetsu Turns Infected Hosts into an Underground Marketplace Asset
Researchers at Group-IB have published a report on the modular malicious framework BraZetsu — a Python-based tool for Windows that ...
Critical SonicWall SMA 1000 Vulnerabilities Exploited in the Wild
SonicWall has confirmed active exploitation of multiple vulnerabilities in Secure Mobile Access (SMA) 1000 series devices — enterprise VPN gateways ...
