Explore in-depth guides: Security · CVE analysis · AI · Cloud · DevOps · Networking · Databases · Linux · Hardware · APIs · all topic areas.
Want just breaches, CVEs and patches? See the dedicated security feed →
Researchers Reveal How a Simple Email Flaw Could Have Compromised Bash's Source Code
Security researchers found a chain of bugs in GNU infrastructure that could have let attackers tamper with the Bash repository.
Read full story →Linux 7.4-rc1 Arrives After the Busiest Merge Window on Record
The 7.4 merge window pulled in 18,591 changesets, nearly as many as the whole record-setting 7.3 cycle, LWN reports.
Read full story →FBI Pins Record Binance Crypto Theft on North Korea's TraderTraitor Group
The FBI blames North Korea's TraderTraitor for a Binance theft of about $6.3–6.43 billion, the largest crypto heist on record.
Read full story →Ivanti Connect Secure Root-Escalation Bug Joins CISA's Exploited List as Three-Flaw Chain Is Fully Patched
CISA adds two more Ivanti Connect Secure flaws to KEV after a chain giving attackers unauthenticated root access is exploited.
Read full story →Syrian Electronic Army Hacker 'Th3Pr0' Gets 42 Months Over Fake White House Blast Tweet
A US court jailed Ahmad Umar Agha for 42 months over a pro-Assad hacking campaign, including the 2013 fake tweet that briefly wiped $136bn off stocks.
Read full story →Trojanized Claude Code Extension Planted SSH Backdoors on Developer Machines
A malicious Claude Code extension hit up to 5,000 developers via Cursor's marketplace, installing SSH backdoors and stealing host data.
Read full story →Cisco Fixes Exploited Firewall VPN Bug That Lets Unauthenticated Attackers Force Reboots
Cisco patched CVE-2026-76418, an exploited ASA and FTD VPN flaw that lets remote attackers crash firewalls without logging in.
Read full story →Alpine Linux Rebuilds GitLab Server After Attack on CVSS 10.0 Flaw That a GitLab Upgrade Alone Did Not Fix
CISA lists GitLab flaw CVE-2026-97229 as exploited after a near-miss attack on Alpine Linux, whose patched server stayed exposed via Ruby.
Read full story →Ukrainian Affiliate of Nefilim and Hive Ransomware Gangs Sentenced to 70 Months by US Court
Artem Stryzhak, who rented Nefilim and Hive ransomware to hit firms and healthcare, gets 70 months in a US federal prison.
Read full story →Low-Scoring VMware ESX Logging Bug Used as Zero-Day by China-Linked Group, CISA Says
CISA added CVE-2026-41709, an ESX logging flaw Warp Panda exploited as a zero-day against US law firms, to its KEV catalog.
Read full story →Scanning Begins Against Critical Oracle E-Business Suite Authentication Flaw
Attackers are probing a 9.8-rated Oracle EBS flaw that lets unauthenticated users take over a core component without a password.
Read full story →Older iPhones and iPads Get Patch for CoreGraphics Zero-Day Used in Targeted Attacks
Apple extends its fix for the exploited CoreGraphics flaw CVE-2026-86950 to older iPhones and iPads with iOS and iPadOS 18.7.11.
Read full story →Critical Pillow Flaw Lets Crafted Filenames Inject Ghostscript Arguments; Version 13.0.0 Fixes It
CVE-2026-112900, rated 9.2 Critical, affects Pillow 2.6.0 up to 13.0.0 through its Ghostscript EPS handling. Upgrade to 13.0.0.
Read full story →Microsoft Rushes Out-of-Band .NET Fixes for Brotli Decoder Flaw Dubbed Broccoli2Shell
Microsoft issued emergency .NET 8, 9, 10 and 11 updates for CVE-2026-111497, a Brotli memory flaw that already has public exploits.
Read full story →Researcher Says Tailscale SSH Can Turn One Breached Device Into Root Across a Network
A lab report claims Tailscale SSH forwarding lets one hacked device gain root on reachable servers. No patch or CVE exists yet.
Read full story →Planted AGENTS.md File Tried to Steer a Developer's AI Coding Agent Toward Malware
Forever Security says a booby-trapped instructions file in a Downloads folder tried to make a coding agent install a malicious npm package.
Read full story →Quest Diagnostics Takes Quanum LSM Portal Offline After Intruder Reaches Patient Records
Quest Diagnostics says an intruder accessed its Quanum LSM ordering portal and exposed some patient records. Data types are still unknown.
Read full story →One Brotli Bug, Many Victims: Imperva Turns CVE-2026-111497 Into Code Execution on Stock Node.js
A Brotli decoder flaw patched Oct 21 hits Node.js, Bun, Envoy and Python. Imperva showed code execution on an official Node.js build.
Read full story →Capcom Says Intruders Took 11.7 Million CAPCOM ID Records, Warns Players of Phishing Risk
Capcom confirms a breach of its CAPCOM ID account system exposing 11.7 million email records. Passwords and card data were not taken.
Read full story →Nextcloud's Collabora Add-on and Arista VeloCloud Orchestrator Flaws Join CISA's Exploited List
CISA adds two critical flaws under active attack to its KEV catalog: Collabora CODE Server in Nextcloud and Arista VeloCloud Orchestrator.
Read full story →Logged-In Users Can Seize Control of Arista VeloCloud Orchestrator Through Exploited SQL Flaw
Arista has patched CVE-2026-114625, an actively exploited SQL injection flaw that lets low-level VCO users gain operator control.
Read full story →PHP2Shell: Twin Flaws in PHP's Engine Put Nearly Every Web Server at Risk
PHP rushed out fixes for two 9.2-rated bugs that let unauthenticated attackers run code on servers. Scanning began within hours.
Read full story →Plex2Shell Chain Leads Six Actively Exploited Flaws on CISA's Urgent Patch List
CISA flags four chained Plex Media Server bugs plus SiteGuard and Siemens flaws as exploited, with patch deadlines starting Oct 23.
Read full story →PHP2Shell: Two Critical Engine Flaws Expose Nearly Every PHP Web Server to Remote Takeover
PHP fixed two 9.2-rated runtime bugs, CVE-2026-109618 and CVE-2026-109619, that allow remote code execution without a login.
Read full story →Ransomware Crews Turn PAN-OS GlobalProtect Bypass Into a Path to Hypervisors
Unit 42 says Qilin and INC ransomware gangs are abusing CVE-2026-0257 in PAN-OS to get past MFA, open VPN sessions and reach vCenter.
Read full story →PHP Rushes Out Emergency Fix for Two Undisclosed Critical Remote Code Execution Bugs After Leak
PHP moved an out-of-cycle fix for two critical flaws to October 21 after a leak; older, unsupported branches may get no patch.
Read full story →Siemens Patches Software Center DLL Flaw After ClickFix Gangs Used It to Plant a Remote Access Trojan
Siemens fixed CVE-2026-110936, a DLL sideloading bug in Siemens Software Center that ClickFix attackers abused to deliver malware.
Read full story →Rank Math PRO Downloads Briefly Carried a Self-Rebuilding Backdoor in Supply-Chain Breach
Rank Math PRO copies served during an 11-hour window in October contained malware; affected WordPress sites must be treated as compromised.
Read full story →Broadcom Wi-Fi Setup Bug Hands Routers to Nearby Attackers, With No Patch in Sight
A researcher says a Broadcom WPS flaw lets nearby attackers run code as root on millions of routers, with no CVE or fix.
Read full story →PwnEscape: Malformed IPv4 Packets Could Let a Guest Break Out of Linux KVM
CVE-2026-99999, rated 9.3, lets bad checksum metadata in IPv4 packets threaten Linux KVM's guest-host isolation. Patches are rolling out.
Read full story →Magento's BlockStrap Bug Earns Perfect CVSS 10 as Sansec Predicts Rapid Exploitation
Sansec warns that Magento and Adobe Commerce flaw CVE-2026-103849 could let attackers run PHP code on store servers. Patch now.
Read full story →Stolen ConnectWise Backup App Credential Opens Door to Over 170 Microsoft 365 Tenants
Attackers used a stolen ConnectWise Cloud Backup app credential to sign in to Microsoft 365 tenants, some with admin roles.
Read full story →Millions of Healthcare Customers Hit in Major Data Breach; What You Need to Know
AdaptHealth reports 4.1 million patients exposed after July cyberattack; experts warn of broader industry vulnerabilities.
Read full story →Cisco Secure Firewall Management Center Under Active Attack Following Security Flaw Discovery
Cisco warns of active exploitation of CVE-2026-20079 in Secure FMC after researchers identify critical vulnerability.
Read full story →Trezor Cryptocurrency Users Face New Security Threat After Email System Compromised
Hardware wallet firm Trezor alerts customers following unauthorized access to email systems, raising phishing risks.
Read full story →DeepSeek's Security Flaw Exposes Risk of AI Systems Bypassing Their Own Safety Guardrails
Researchers discover vulnerability allowing DeepSeek AI to escape built-in restrictions without user consent, raising broader concerns about AI system integrity.
Read full story →Hackers Are Stealing AI Service Passwords to Break Into Company Accounts
Criminals are using stolen login credentials to hijack AI tools from major providers, creating security gaps companies need to patch fast.
Read full story →Chinese-Linked Hackers Use New Exploit Kit to Steal AI Credentials and Break Through Security Defenses
Cybercriminals are using a toolkit called BlueMoon to harvest AI authentication tokens from stolen password files, potentially bypassing multi-factor authentication protections.
Read full story →Multiple Hacking Groups Exploit Same Security Flaws in Popular Software
Four different spy operations used identical vulnerabilities in Chrome and Windows within days, raising alarms about shared attack tools.
Read full story →U.S. Law Enforcement Shuts Down Major Cryptocurrency Fraud Operation, Seizes Over $50 Million
Federal agents shut down a large-scale crypto scam platform and froze $52.8M in digital assets.
Read full story →