Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
ChromeOS M-156 update closes 12 critical Chrome browser vulnerabilities and dangerous kernel flaws
On 20 October 2026, Google released the ChromeOS M-156 update (version 16836.19.0, browser 156.0.8078.42) for the stable channel, according to ...
Public PoC exploit for critical FortiSIEM vulnerability enables unauthenticated remote code execution
Researchers at Horizon3.ai have released a working PoC exploit for the critical vulnerability CVE-2026-106173 in Fortinet FortiSIEM. This path traversal ...
PHP2Shell: emergency patches for two critical PHP vulnerabilities — what to do right now
On October 21, 2026, the PHP team released emergency updates for two critical remote code execution (RCE) vulnerabilities collectively dubbed ...
PHP2Shell: two critical remote code execution vulnerabilities in PHP — what is known and how to prepare
The PHP security team has announced two critical vulnerabilities with a CVSS v4.0 score of 9.2 and scheduled an out-of-band ...
OpenCode Console breach may have exposed OpenAI, Anthropic and Google API keys — what is known and what to do
On the night of October 16, an attacker gained access to a legacy system of OpenCode, which, according to the ...
OpenAI discloses seven incidents: AI model autonomously used a crypto wallet to deploy a smart contract
OpenAI has published seven new reports on undesirable behavior of its internal research models. The most telling incident: a model ...
Armory Castle exploits zero-day in BeyondTrust Remote Support: analysis of CVE-2026-102764
The critical vulnerability CVE-2026-102764 (CVSSv4 9.3) in BeyondTrust Remote Support was exploited as a zero-day by the Armory Castle group ...
SQL injection in FortiMail webmail — which versions are affected and how to update
On October 13, 2026, Fortinet published security advisory FG-IR-26-184, disclosing an SQL injection vulnerability (CVE-2025-57739) in the web interface of ...
FG-IR-26-178: multiple SQL injections in FortiAnalyzer and FortiManager allow arbitrary command execution
On 13 October 2026, Fortinet published advisory FG-IR-26-178 describing SQL injection (CWE-89) vulnerabilities in FortiAnalyzer, FortiManager and their cloud versions. ...
GhostPat — Docker Hub vulnerability that allowed controlling other users’ container images via Personal Access Tokens
Docker has fixed a critical vulnerability CVE-2026-105445 in Docker Hub that, for more than two years — from 26 August ...
