Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
N-able N-central zero-day chain puts MSP environments at risk
The N-able N-central remote monitoring and management platform, widely used by managed service providers (MSPs) and IT departments, contains a ...
How PREY-0058 Targets Microsoft 365 with Vishing and AitM
Researchers at Arctic Wolf have uncovered a large-scale data theft and extortion campaign targeting users of Microsoft 365 and other ...
CVE-2026-84869: Worm-like VBScript Campaign Targeting ScreenConnect Clients
The critical vulnerability CVE-2026-84869 (CVSS 9.9) in the client components of ConnectWise ScreenConnect is being actively exploited for worm-like propagation ...
How Unicode Tags Help a Mass Phishing Campaign Bypass Email Security
Microsoft has recorded a large-scale phishing campaign in which attackers insert invisible characters from the Unicode Tags block (U+E0000–U+E007F) into ...
How CVE-2026-6471 Impacts PostgreSQL Logical Replication
PostgreSQL has released security updates that fix the CVE-2026-6471 vulnerability (CVSS 7.2) in the logical decoding mechanism. The flaw allows ...
CERT Polska Warns of Active Attacks on MikroTik RouterOS Devices
CERT Polska published a warning about active exploitation of vulnerabilities in MikroTik RouterOS that allow attackers to gain full administrative ...
Major Chrome 153 security update fixes 230 vulnerabilities, including 5 critical flaws in WebGL and Cast
On September 8, 2026, Google released the stable version of Chrome 153 (153.0.8010.36 for Linux, 153.0.8010.36/.37 for Windows and Mac) ...
PaperCut MF/NG auth bypass and RCE vulnerabilities under attack
Two recently disclosed vulnerabilities in PaperCut MF/NG — CVE-2026-81578 (authentication bypass, CVSS v4.0: 8.8) and CVE-2026-82078 (remote code execution, CVSS ...
RCE Attacks via Super Forms and Elementor Pro File Upload Bugs
Two critical vulnerabilities in the popular WordPress plugins Super Forms (CVE-2026-14894, CVSS 9.8) and Elementor Pro (CVE-2026-32475, CVSS 9.8) are ...
CVE-2026-85046: Actively Exploited V8 Zero-Day in Google Chrome
On September 3, 2026, Google released an update to the stable Chrome channel for desktop platforms, addressing 12 vulnerabilities, including ...
