Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
SonicWall will not fix critical vulnerabilities in EOL GMS versions — what organizations should do
SonicWall has published advisory SNWLID-2026-0019, disclosing two vulnerabilities in the centralized management system Global Management System (GMS) version 9.5.2 and ...
IBM discloses four Langflow vulnerabilities — two with CVSS 9.8 allow unauthenticated code execution
Langflow OSS — a popular open-source tool for building AI agents and workflows — contains four vulnerabilities, two of which ...
VMware ESX logging vulnerability exploited as a zero-day — CISA requires patching by November 11
CVE-2026-41709, an insufficient logging vulnerability in VMware ESX, was added by CISA to the Known Exploited Vulnerabilities catalog on October ...
Critical vulnerability in Drupal Commerce Core exploited in the wild — updates and guidance
Drupal has published a security advisory about the CVE-2026-118539 vulnerability in the Commerce Core module, which provides online store functionality ...
Attack on Alpine Linux GitLab via CVE-2026-97229: why updating GitLab didn’t fix the vulnerability
The critical vulnerability CVE-2026-97229 (CVSS 10.0) in the Onigmo regular expression engine embedded in Ruby was used to attack the ...
Critical GitLab RCE and Cisco Firewall DoS added to CISA KEV catalog after confirmed exploitation
On October 29, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to the Known Exploited Vulnerabilities ...
Cisco patches actively exploited SSL VPN vulnerability and reveals APT campaign against SD-WAN
Cisco has released security updates for CVE-2026-76418, a high-severity vulnerability (CVSS 8.6) in Secure Firewall ASA and FTD software that, ...
KeyDrift malware extracts encryption keys from compromised Cisco SD-WAN controllers
The critical vulnerability CVE-2026-20127 (CVSS 10.0) in the management components of Cisco Catalyst SD-WAN has been used to install the ...
Critical vulnerability in Canonical LXD and MicroCloud lets attackers impersonate a trusted client
Canonical has released patches for CVE-2026-112816, a critical vulnerability in LXD and MicroCloud that allows an attacker to authenticate as ...
CISA adds two Ivanti Connect Secure vulnerabilities to KEV that are used in an exploit chain to obtain root access
On October 30, 2026, CISA added two Ivanti Connect Secure vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog. Vulnerabilities CVE-2026-111357 ...
