Latest in Cybersecurity news
CISA KEV Weekly Roundup: 6 Exploited Flaws, 3 Due Today
CISA added six exploited flaws to its KEV catalog this week: four Plex Media Server bugs that chain …
SiteGuard CVE-2026-106931: Exploited WAF Flaw Hands Attackers Root, and CISA’s Deadline Is Tomorrow
Attackers are exploiting a command injection flaw in SiteGuard Server Edition, a Japanese web applic…
Plex2Shell CVE-2026-96652: Patch and Hunt Codecs
Plex confirms widespread exploitation of the four-flaw Plex2Shell chain. Update Media Server to 1.43…
Oracle October 2026 CPU: 1,283 Patches in Pre-Release
Oracle’s October 2026 CPU pre-release lists 1,283 patches, including 598 for remotely exploitable fl…
Broadcom WPS Zero-Day: Root Over Wi-Fi, No CVE, No Fix
A memory-corruption bug in Broadcom’s Wi-Fi Protected Setup code lets anyone within radio range run …
FortiOS CVE-2025-61624: PEERSTITCH Implant Hides in FortiGate Memory
CISA added Fortinet CVE-2025-61624 to KEV after Unit 42 tied it to PEERSTITCH, a memory-resident For…
BeyondTrust CVE-2026-102764: China-Nexus Zero-Day Hits Remote Support
A suspected China-nexus group exploited BeyondTrust Remote Support zero-day CVE-2026-102764. Apply B…
CISA KEV Weekly Roundup: 7 Exploited Flaws, 3 Deadlines
Seven exploited vulnerabilities entered CISA KEV this week. Review the October 16–18 federal deadlin…
Cisco Email Gateway CVE-2026-76519: One Email, Root Access
Cisco Secure Email Gateway zero-day CVE-2026-76519 lets one crafted attachment give attackers root. …