Latest in Cybersecurity news
Collabora CVE-2026-110447: Nextcloud Web Shells, Deadline Today
CVE-2026-110447 lets unauthenticated attackers run commands on Nextcloud servers that use the Collab…
VeloCloud CVE-2026-114625: A Read-Only Login Becomes Superuser
Arista VeloCloud Orchestrator has its third exploited zero-day since July. CVE-2026-114625 lets the …
CISA KEV Weekly Roundup: 6 Exploited Flaws, 3 Due Today
CISA added six exploited flaws to its KEV catalog this week: four Plex Media Server bugs that chain …
SiteGuard CVE-2026-106931: Exploited WAF Flaw Hands Attackers Root, and CISA’s Deadline Is Tomorrow
Attackers are exploiting a command injection flaw in SiteGuard Server Edition, a Japanese web applic…
Plex2Shell CVE-2026-96652: Patch and Hunt Codecs
Plex confirms widespread exploitation of the four-flaw Plex2Shell chain. Update Media Server to 1.43…
Oracle October 2026 CPU: 1,283 Patches in Pre-Release
Oracle’s October 2026 CPU pre-release lists 1,283 patches, including 598 for remotely exploitable fl…
Broadcom WPS Zero-Day: Root Over Wi-Fi, No CVE, No Fix
A memory-corruption bug in Broadcom’s Wi-Fi Protected Setup code lets anyone within radio range run …
FortiOS CVE-2025-61624: PEERSTITCH Implant Hides in FortiGate Memory
CISA added Fortinet CVE-2025-61624 to KEV after Unit 42 tied it to PEERSTITCH, a memory-resident For…
BeyondTrust CVE-2026-102764: China-Nexus Zero-Day Hits Remote Support
A suspected China-nexus group exploited BeyondTrust Remote Support zero-day CVE-2026-102764. Apply B…