SecurityWeek (55 minutes ago)
Attackers could exploit the flaws for remote code execution, credential theft, and administrator account creation.
Read the full story on SecurityWeek.
Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges.
The Russian state-backed threat group Turla has been using a new malicious toolset called ‘Cereal’ to intercept emails on Microsoft Exchange servers at government organizations.
Four flaws that attackers could exploit without logging in were fixed today as part of SAP’s monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score.
CISA has added CVE-2026-123218 and CVE-2026-116779 to KEV, urging federal agencies to patch them within three days.
An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran’s Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday.
Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year.
France summoned the Iranian ambassador and said it would seek European sanctions against those responsible for the attack
The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.
Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.
Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.
65 active sources
20 Turkish · 45 English
All sources
