GoAhead TLS Vulnerabilities Threaten Millions of Devices
Three GoAhead TLS vulnerabilities in embedded web server risk certificate revocation bypass and session decryption across many devices.
Wednesday, October 28
Monday, October 26
Global Cyber Campaign Exposes 70,000 Credentials Through Firewall Breaches
PremiumLarge-scale campaign targeting exposed Fortinet and Palo Alto edge devices exposed over 70,000 credentials and attempted follow-on compromises.
HPE Addresses Critical Vulnerabilities with ArubaOS Patch Release
PremiumHPE released ArubaOS patches for 72 vulnerabilities including eight maximum-severity authentication bypass and RCE flaws.
Accidental Disclosure of Critical Linux Kernel Flaws Raises Security Concerns
PremiumTrend Micro ZDI reports unpatched Linux kernel flaws were accidentally posted, including CVSS 9.0 issues targeting ksmbd.
Russian Hackers Exploit New Backdoor in Attack on Ukrainian Logistics
PremiumESET links Sandworm and partners to a destructive wiping attack using a new mesh network backdoor targeting Ukrainian logistics firms.
Critical PHP Vulnerabilities Threaten Palo Alto Networks' PAN-OS
PremiumPalo Alto confirmed critical PHP RCEs (CVE-2026-109618, CVE-2026-109619) affecting PAN-OS and cloud services, urging hotfixes.
Supply Chain Breach Hits Global Shipping Firms
PremiumA supply-chain compromise enabled a ransomware group to breach roughly 40 shipping companies, disrupting logistics and operations.
BlackX Bootkit Targets Central Asian Diplomats by Bypassing Secure Boot Protections
PremiumBlackX UEFI bootkit exploited Baton Drop to bypass Secure Boot, deployed in espionage targeting diplomatic entities in Central Asia.
Critical Tailscale SSH Vulnerabilities Expose Servers to Root Access Risks
PremiumTailscale SSH flaws (Tailworm) allow lateral escalation: one compromised device can gain root on reachable servers via port forwarding.
Critical Vulnerability in Arista's VeloCloud Orchestrator Poses Severe Risks
PremiumArista warns a critical SQL injection zero-day in VeloCloud Orchestrator can grant operator-level privileges to attackers.
Friday, October 23
Urgent Security Update: Arista Addresses Critical Zero-Day Flaw in VeloCloud Orchestrator
PremiumArista released patches for an actively exploited zero-day in VeloCloud Orchestrator on-prem deployments enabling remote compromise.
Ransomware Breach Exposes Children's Data Due to Weak Passwords
PremiumICO criticizes Welsh local government and IT provider after children's data was stolen following a ransomware attack involving insecure 'Password1' credentials.
Wednesday, October 21
German Authorities Arrest Qilin Ransomware Suspect Linked to Fatal Hospital Cyber Attack
German police arrested a suspected Qilin gang member linked to Synnovis attack that disrupted hospitals and contributed to a patient death.
OpenCode Console Security Breach Exposes API Keys
OpenCode Console intrusion may have leaked OpenAI, Anthropic, and Google API keys stored in legacy systems.
Monday, October 19
Friday, October 16
Ad-Delivered Spyware Campaign Targets Al Jazeera Devices
PremiumCitizen Lab documents ad-delivered zero-click spyware campaign infecting 45 Al Jazeera devices via background ads.
AdFection Spyware Exploits Digital Ads for Covert Surveillance
PremiumAdFection zero-click spyware delivered via targeted ads infects devices without user interaction, affecting news organizations.
Zero-Click Spyware Targets Al Jazeera Through Online Ads
PremiumCitizen Lab links powerful zero-click spyware infections at Al Jazeera and others to targeted online ads needing no user interaction.
Palo Alto Networks Urges Immediate Patching for Critical PAN-OS Vulnerability
PremiumPAN-OS authenticated RCE (CVE-2026-0322) observed in limited exploitation against firewalls; immediate patching urged.
Wednesday, October 14
Get these articles delivered to your inbox.
Subscribe free