Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Unpatched vulnerability in CryptoPayment Gateway WordPress plugin exposes wallet credentials
The critical vulnerability CVE-2026-81648 with a CVSS 10.0 score has been discovered in the CryptoPayment Gateway WordPress plugin versions 1.2.1 ...
Synology confirms ransomware attacks on NAS devices running outdated DiskStation Manager (DSM)
On October 29, 2026, Taiwanese company Synology confirmed that attackers are exploiting a vulnerability that was already fixed back in ...
Two vulnerabilities in Barracuda products enable root access through exploit chaining
Barracuda published a security advisory on November 2, 2026, describing two vulnerabilities in its products: a pre-authentication authorization bypass (CVE-2026-116606, ...
APT vulnerability allows replacing verified packages and executing code with root privileges
The critical CVE-2026-109518 vulnerability in the APT package manager allows an attacker who can intercept HTTP traffic between the client ...
CVE-2026-83844 vulnerability in Windows Paint: fix available only through Microsoft Store
Microsoft has released a fix for the CVE-2026-83844 vulnerability in Windows Paint, which allows remote execution of arbitrary code. The ...
CISA added WordPress Core vulnerability CVE-2026-119977 to the KEV catalog — what is known about exploitation
On November 3, 2026, CISA added vulnerability CVE-2026-119977 to the Known Exploited Vulnerabilities (KEV) catalog. The vulnerability affects WordPress Core ...
CVE-2026-98432: use-after-free in Linux kernel IPv4 TCP — patches, diverging severity ratings, and temporary mitigations
The CVE-2026-98432 vulnerability in the Linux kernel IPv4 TCP networking stack allows a remote unauthenticated attacker to achieve arbitrary code ...
OpenSSH and musl libc vulnerability on Alpine Linux lets you log in without a password via an overlong string
A vulnerability in the interaction between OpenSSH and the musl libc library allows an attacker to log in to an ...
SonicWall will not fix critical vulnerabilities in EOL GMS versions — what organizations should do
SonicWall has published advisory SNWLID-2026-0019, disclosing two vulnerabilities in the centralized management system Global Management System (GMS) version 9.5.2 and ...
IBM discloses four Langflow vulnerabilities — two with CVSS 9.8 allow unauthenticated code execution
Langflow OSS — a popular open-source tool for building AI agents and workflows — contains four vulnerabilities, two of which ...
