Latest security news
Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.
-
2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
-
2026-012: Critical Vulnerabilities in Check Point Products
-
2026-013: Critical Vulnerability in F5 BIG-IP APM
-
2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
-
2026-015: Critical Vulnerability in Multiple Atlassian Products
-
2026-016: Critical Vulnerability in GitLab CE and EE
-
2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
-
2026-018: Critical Vulnerabilities in PHP
-
Cisco Secure Email Gateway SQL Injection Vulnerability
-
CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard
-
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
-
Cisco Identity Services Engine Authorization Bypass Vulnerability
-
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
-
Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
-
Cisco UCS Central Software Remote Code Execution Vulnerability
-
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
-
Barracuda ESG Authentication Bypass Flaw Opens Path to Root
-
Live Q&A: CISSP exam prep with ISC2 experts
-
Impart uses AI to build virtual patches without putting models in the traffic path
-
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
-
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
-
Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
-
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
-
CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
-
CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass