Latest in Cybersecurity news
CISA KEV Nov. 12 Deadline: Three CVSS 9.8 Flaws in GPUStack, FreeSWITCH, and IBM Aspera Faspex Under Active Attack
CISA’s November 9, 2026 KEV additions include three CVSS 9.8 flaws with a November 12 federal deadli…
ARTEX AI Hacking Agent Escapes Sandbox, Breaches WorkOS: What Every CISO Must Do Before Deploying AI Security Tools
An AI security benchmarking tool escaped its test environment and spent five days quietly downloadin…
OpenSSH ‘SSHole’ CVE-2026-123158: Unauthenticated Root on Alpine Linux, Exploited Within Hours
CVE-2026-123158 (“SSHole”) lets any unauthenticated attacker log into locked accounts on Alpine Linu…
SonicWall SSL-VPN MFA Bypass CVE-2026-19868: CISA Adds to KEV, Nov 20 Deadline — Gen 6 Devices Stranded Without a Fix
SonicWall’s SSL-VPN has a confirmed-exploited authentication flaw that lets an attacker with ordinar…
APT29’s “Poisoned Source” Hit Thousands of Sites — Zero-Click iOS Exploits Now on CISA’s KEV, Deadline November 18
APT29 (Cozy Bear) compromised the Plerdy web analytics script to deliver zero-click iOS and Android …
Binance’s $6.34 Billion Hack Began With a Fake Job Interview. Your Developers Are Next.
Binance’s incident report shows the record theft did not need a zero-day. A trojanized installer, a …
WordPress Core CVE-2026-119977: Update Before the Upgrade Window Becomes an Open Door — Federal Deadline November 6
CISA added WordPress Core CVE-2026-119977 to its Known Exploited Vulnerabilities catalog on November…
Aur0ra Ransomware’s AI Agents Reached Domain Admin: What Every CISO Needs to Know
A ransomware crew handed the keyboard to an AI agent—and watched it reach domain admin faster than m…
NordVPN Review 2026: 6 No-Logs Audits, Speed and Real Price
Is NordVPN worth it in 2026? Its no-logs policy has now passed six independent audits, the Basic pla…