Cyber News

    Dashboard / Cyber News

    Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
    in
    [email protected] (The Hacker News)-5 days ago

    Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

    Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every 0.44
    Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
    in
    [email protected] (The Hacker News)

    Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

    6 days ago

    How to download and read ebooks safely | Kaspersky official blog
    Ox
    Oxana Frolova

    How to download and read ebooks safely | Kaspersky official blog

    6 days ago

    TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
    in
    [email protected] (The Hacker News)

    TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

    6 days ago

    WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
    in
    [email protected] (The Hacker News)-6 days ago

    WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

    Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 through 7.1.3. It carries a CVSS score of 8.1 on the CVSS scoring system. Patches for the flaw were released on October
    Vulnerabilities in Request Tracker and RT for Incident Response software
    CE
    CERT Polska

    Vulnerabilities in Request Tracker and RT for Incident Response software

    6 days ago

    Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
    in
    [email protected] (The Hacker News)

    Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis

    6 days ago

    Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
    in
    [email protected] (The Hacker News)

    Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving

    6 days ago

    Vulnerabilities in Płatnik software
    CE
    CERT Polska-6 days ago

    Vulnerabilities in Płatnik software

    CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-110970 to CVE-2026-110972) found in Płatnik software.
    Vulnerabilities in ARKETEAM Protectel software
    CE
    CERT Polska

    Vulnerabilities in ARKETEAM Protectel software

    6 days ago

    Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
    in
    [email protected] (The Hacker News)

    Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison

    6 days ago

    Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
    in
    [email protected] (The Hacker News)

    Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

    6 days ago

    Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
    in
    [email protected] (The Hacker News)-6 days ago

    Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

    Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13. "This module enables you to sell goods and services to customers through an included shopping cart
    CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
    in
    [email protected] (The Hacker News)

    CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

    6 days ago

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    6 days ago

    A Vulnerability in GitLab Could Allow for Remote Code Execution

    A Vulnerability in GitLab Could Allow for Remote Code Execution

    6 days ago

    Vulnerabilities in Zimbra Collaboration software
    CE
    CERT Polska-7 days ago

    Vulnerabilities in Zimbra Collaboration software

    During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.
    Applying Security by Design and Cyber Immunity principles to protect AI systems | Kaspersky official blog
    Ka
    Kaspersky Team

    Applying Security by Design and Cyber Immunity principles to protect AI systems | Kaspersky official blog

    7 days ago

    Vulnerabilities in Szafir software
    CE
    CERT Polska

    Vulnerabilities in Szafir software

    7 days ago

    Strengthening API and MCP Security Through Token Risk Detection with Thales Imperva API Security
    Am
    Amrit Talapatra

    Strengthening API and MCP Security Through Token Risk Detection with Thales Imperva API Security

    7 days ago

    Weak keys in eMudhra CA certificates: the risks and how to respond | Kaspersky official blog
    St
    Stan Kaminsky-8 days ago

    Weak keys in eMudhra CA certificates: the risks and how to respond | Kaspersky official blog

    We explain how the weak keys came about, and which applications and IT systems in an organization should be checked for the vulnerability so the threat can be eliminated.
    Vulnerability in Wing FTP Server software
    CE
    CERT Polska

    Vulnerability in Wing FTP Server software

    8 days ago

    Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

    Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

    8 days ago

    A Vulnerability in Brotli Library Could Allow for Remote Code Execution

    A Vulnerability in Brotli Library Could Allow for Remote Code Execution

    8 days ago

    Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution
    -9 days ago

    Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

    Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution.

    • iOS is a mobile operating system for mobile devices, including the iPhone and iPod touch.
    • iPadOS is the operating system for iPad devices.
    • macOS is the operating system for Mac computers.
    • tvOS is the operating system for Apple TV devices.
    • watchOS is the operating system for Apple Watch devices.
    • visionOS is the operating system for Apple Vision Pro.
    • Safari is a web browser available for macOS, iOS, and iPadOS.

    Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the affected application or, in some cases, with root, system, or kernel privileges. Depending on the privileges associated with the application or service, an attacker could then install programs; view, change, or delete data; or take further control of the affected device.

    Vulnerability in KGS Software tia Viewer software
    CE
    CERT Polska

    Vulnerability in KGS Software tia Viewer software

    9 days ago

    Vulnerabilities in twofactor_gauthenticator plugin for Roundcube
    CE
    CERT Polska

    Vulnerabilities in twofactor_gauthenticator plugin for Roundcube

    9 days ago

    Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management
    So
    Sonny Singh

    Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Privileged Access Management

    10 days ago

    Vulnerabilities in boneIO products
    CE
    CERT Polska-10 days ago

    Vulnerabilities in boneIO products

    CERT Polska has received a report about 11 vulnerabilities (from CVE-2026-77052 to CVE-2026-77062) found in boneIO products.
    Cybersecurity in Christopher Nolan’s The Odyssey | Kaspersky official blog
    Ge
    Georgy Pak

    Cybersecurity in Christopher Nolan’s The Odyssey | Kaspersky official blog

    10 days ago

    Three Lessons Cloud Customers Have Taught Us About Multi-Cloud Security
    Ga
    Gayle Baird

    Three Lessons Cloud Customers Have Taught Us About Multi-Cloud Security

    12 days ago

    Palo Alto Networks Brings Continuous AI Defense and Prisma AIRS to the OpenAI Marketplace
    Mu
    Munish Khetrapal

    Palo Alto Networks Brings Continuous AI Defense and Prisma AIRS to the OpenAI Marketplace

    13 days ago

    Technology that blocks DGA domains | Kaspersky official blog
    Ro
    Roman Dedenok-13 days ago

    Technology that blocks DGA domains | Kaspersky official blog

    Kaspersky email security solutions now include a technology that detects domains with auto-generated names.
    Vulnerabilities in CGM CLININET software
    CE
    CERT Polska

    Vulnerabilities in CGM CLININET software

    13 days ago

    How new PHP vulnerabilities threaten home users | Kaspersky official blog
    Ed
    Editorial Team

    How new PHP vulnerabilities threaten home users | Kaspersky official blog

    14 days ago

    PHP2Shell: Early Attack Activity Through Imperva’s Lens
    Na
    Nadav Avital

    PHP2Shell: Early Attack Activity Through Imperva’s Lens

    14 days ago

    Vulnerability in MTW CleanShot X software
    CE
    CERT Polska-14 days ago

    Vulnerability in MTW CleanShot X software

    Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.
    Node2Shell: From Brotli Data to Remote Code Execution
    Ro
    Ron Masas

    Node2Shell: From Brotli Data to Remote Code Execution

    14 days ago

    Multiple Vulnerabilities in PHP Could Allow for Remote Code Execution

    Multiple Vulnerabilities in PHP Could Allow for Remote Code Execution

    15 days ago

    PHP2Shell: How to Protect Your Server | Kaspersky official blog
    Ed
    Editorial Team

    PHP2Shell: How to Protect Your Server | Kaspersky official blog

    15 days ago

    Millions of PHP Instances Exposed - What Organizations Need To Do Right Now
    Le
    Lee Klarich-15 days ago

    Millions of PHP Instances Exposed - What Organizations Need To Do Right Now

    Two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) have been published. Both vulnerabilities carry a severe CVSS score of 9.2 (more technical details are in the Unit 42 Threat Brief).  This is …

    The post Millions of PHP Instances Exposed - What Organizations Need To Do Right Now appeared first on Palo Alto Networks Blog.

    PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment
    Na
    Nadav Avital

    PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment

    15 days ago

    Advancing Agentic AI Security with Palo Alto Networks and NVIDIA
    Sh
    Shrikant Brahmbhatt, Itay Ozery and Lee Space

    Advancing Agentic AI Security with Palo Alto Networks and NVIDIA

    15 days ago

    AI doxing tools: how online surveillance technology has changed | Kaspersky official blog
    Ek
    Ekaterina Murlykina

    AI doxing tools: how online surveillance technology has changed | Kaspersky official blog

    16 days ago

    A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files
    -16 days ago

    A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files

    A vulnerability has been discovered in BeyondTrust Remote Support that could allow for arbitrary upload of files. BeyondTrust Remote Support is an enterprise secure remote access solution that enables IT teams to securely access and troubleshoot remote endpoints. Successful exploitation of this vulnerability could allow a remote attacker to perform file operations on an affected appliance.

    Reinventing Endpoint Security with Cortex XDR One
    Da
    Daphna Shemesh

    Reinventing Endpoint Security with Cortex XDR One

    17 days ago

    Introducing Unit 42 Managed Agentic Endpoint Security
    Sh
    Sharon Maydar

    Introducing Unit 42 Managed Agentic Endpoint Security

    17 days ago

    Fast-Track Your PQC Strategy: A Template for OMB M-26-15 Readiness
    Ma
    Matt Marsden

    Fast-Track Your PQC Strategy: A Template for OMB M-26-15 Readiness

    20 days ago

    Vulnerability in NordVPN software
    CE
    CERT Polska-20 days ago

    Vulnerability in NordVPN software

    Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.
    Vulnerability in Sparx Systems Enterprise Architect software
    CE
    CERT Polska

    Vulnerability in Sparx Systems Enterprise Architect software

    21 days ago

    Latest News

    See All
    Cyberattack disrupts blood storage refrigeration systems in France
    La
    Lawrence Abrams-about 17 hours ago

    Cyberattack disrupts blood storage refrigeration systems in France

    Critical Ruby on Rails Flaw Could Let Hackers Steal Server Secrets Through Malicious Image Uploads
    Gu
    Guru Baran-about 18 hours ago

    Critical Ruby on Rails Flaw Could Let Hackers Steal Server Secrets Through Malicious Image Uploads

    Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
    in
    [email protected] (The Hacker News)-about 18 hours ago

    Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root