Latest in Cybersecurity news
OpenSSH ‘SSHole’ CVE-2026-123158: Unauthenticated Root on Alpine Linux, Exploited Within Hours
CVE-2026-123158 (“SSHole”) lets any unauthenticated attacker log into locked accounts on Alpine Linu…
SonicWall SSL-VPN MFA Bypass CVE-2026-19868: CISA Adds to KEV, Nov 20 Deadline — Gen 6 Devices Stranded Without a Fix
SonicWall’s SSL-VPN has a confirmed-exploited authentication flaw that lets an attacker with ordinar…
APT29’s “Poisoned Source” Hit Thousands of Sites — Zero-Click iOS Exploits Now on CISA’s KEV, Deadline November 18
APT29 (Cozy Bear) compromised the Plerdy web analytics script to deliver zero-click iOS and Android …
Binance’s $6.34 Billion Hack Began With a Fake Job Interview. Your Developers Are Next.
Binance’s incident report shows the record theft did not need a zero-day. A trojanized installer, a …
WordPress Core CVE-2026-119977: Update Before the Upgrade Window Becomes an Open Door — Federal Deadline November 6
CISA added WordPress Core CVE-2026-119977 to its Known Exploited Vulnerabilities catalog on November…
Aur0ra Ransomware’s AI Agents Reached Domain Admin: What Every CISO Needs to Know
A ransomware crew handed the keyboard to an AI agent—and watched it reach domain admin faster than m…
NordVPN Review 2026: 6 No-Logs Audits, Speed and Real Price
Is NordVPN worth it in 2026? Its no-logs policy has now passed six independent audits, the Basic pla…
Ivanti CVE-2026-111357: The Root Fix October Missed, Due Today
Ivanti has patched the two Connect Secure zero-days its October fix left open. CISA’s deadline for C…
Edge-Device Zero-Days of October 2026: 12 Exploited, 1 Due Sunday
October 2026’s edge-device zero-days: 12 exploited products from Fortinet, Cisco, Citrix, Ivanti and…