Latest Security News

CISA adds cPanel auth bypass and SonicWall SMA buffer overflow to KEV catalog, mandating federal patching.

CISA, FBI, NSA joint advisory on Russian state-sponsored operations targeting critical infrastructure.

Emergency Directive 26-02 requiring enhanced monitoring and mitigations across actively exploited zero-days.

Joint advisory with international partners highlights malicious targeting of organisations from a range of sectors across the globe.

ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.

Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.

UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.

Owners of operational technology encouraged to address avoidable vulnerabilities, and build long-term cyber resilience.

Critical pre-authentication bypass in cPanel & WHM. Exploited in ransomware campaigns since February 2026.

Elevation of privilege in Windows Kerberos KDC. Actively exploited. Patch included in May 2026 update.

Pre-authentication heap-based buffer overflow in SonicWall SMA 1000 series allowing unauthenticated RCE.

SonicWall Capture Labs published their Q1 2026 threat report highlighting 98 new malware variants and 22% increase in ransomware targeting SMBs.

Critical pre-authentication buffer overflow in SMA 1000 series SSLVPN appliances. Update to firmware 12.4.3 immediately.

Network Security Manager update introduces ML-based anomaly detection and automated policy recommendations.

Critical heap-based buffer overflow in FortiOS SSL-VPN pre-authentication. Affects 7.2.x through 7.4.x. Upgrade to 7.4.3+.

New managed SOC service combining AI-driven threat detection with human analysts for mid-market enterprises.

FortiManager 7.6 introduces zero-trust policy templates, improved multi-tenancy, and FortiCNAPP integration.

If you’re suddenly being overwhelmed with sign-up emails, it could very well be a sign of something more serious

Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safe

Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.

ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026

A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account

The cybersecurity market is often making it tougher for SMBs to keep threats at bay

Zscaler research shows phishing attacks up nearly 50%, with AI tools and phishing kits enabling large-scale campaigns.

ThreatLabz identifies new ransomware group exploiting unpatched vulnerabilities in enterprise collaboration platforms.

Latest platform update introduces AI-driven security posture assessment and automated policy tuning.

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploi...

Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice publ...

The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done. This week had plenty of that. Trusted...

The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detail...

In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the agent's prompt. Separately, Email-to-Case and Web-to-Case turn inbound customer messages into case records; i...

A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and secu...

Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]

Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. [...]

Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a [...]

Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. [...]

The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]

Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010). [...]

Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures. The post Siemens Software Center Vulnerabilit

Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules. The post Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16. The post Rank Math PRO WordPress Plugin Compromised in Supply Chain

The services remain unavailable as the company continues remediation and security validation. The post ConnectWise Suspends Cloud Services in Response to Cyberattack appeared first on

Threat actors have been observed delivering cryptocurrency miners and proxy software. The post Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclo

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006. The post One Compromised Login Exposed Millions of Califor

Gangs moving from encryption to pure data extortion, reducing technical complexity while increasing pressure.

67% of CISOs find CSPM tools overwhelming due to alert fatigue and lack of integration.

Energy, water, and transportation sectors face increasingly sophisticated state-sponsored cyber attacks.