Security (10)

Part of the Technology feed · AI-researched.

Latest

Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Unauthenticated attackers can write arbitrary files and execute commands with root privileges on Cisco Secure Email Gateway systems.

Next.js releases critical security patches for RCE flaws in caching and SVG processing

Next.js released critical security updates on October 14 fixing two remote code execution vulnerabilities (CVSS 9.5 each) and one high-severity denial-of-service flaw. The RCE flaws affect caching in React Server Components and SVG rendering via the sharp library, with fixes available in versions 16

Palo Alto Networks patches critical PAN-OS RCE vulnerability under active exploitation

Palo Alto Networks released security updates for CVE-2026-0322, a high-severity remote code execution vulnerability in PAN-OS management interface currently under active exploitation.

NGINX releases patches for five vulnerabilities including critical RCE and TLS bug

NGINX released patches on October 14 in versions 1.30.6 and 1.31.7 addressing five vulnerabilities, including three critical memory bugs rated 9.2 on CVSS v4.0 that could crash worker processes or enable remote code execution, plus a TLS client-certificate verification flaw rated 8.3.

Hackers deploy PEERSTITCH malware on FortiGate firewalls via Fortinet vulnerabilities

Attackers exploited Fortinet vulnerabilities to install PEERSTITCH, a stealthy ARM64 malware on FortiGate firewalls in a telecom organization breach. The memory-resident malware leaves no disk artifacts, opens no ports, and communicates through legitimate process traffic, enabling long-term access t

Drupal patches critical Field UI vulnerability allowing unauthenticated RCE

Drupal released critical security patches on October 14 fixing a Field UI vulnerability (CVE-2026-108097) rated 19 out of 25 on Drupal's risk scale that enables unauthenticated remote code execution through contributed modules. Unpatched Drupal versions 11.2.x and below, 10.5.x and below, and versio

UK Legal Aid Agency breach exposed records dating to 1978

A cyberattack on Britain's Legal Aid Agency exposed records dating back decades, far more extensive than initially revealed.

Langflow critical RCE flaw exploited in 1,423 honeypot attacks

A critical authenticated remote code execution vulnerability in Langflow (CVE-2026-105740, CVSS 9.9) affecting versions prior to 1.9.0 has been exploited in 1,423 honeypot attacks since September 19, 2026. Non-admin authenticated users can inject malicious MCP servers to execute arbitrary OS command

International CSAM Crackdown Nets 95 Arrests Across 17 Countries

Law enforcement from 17 countries arrested 95 suspects in an INTERPOL-coordinated operation targeting child sexual abuse material distribution.

Hirudo Android RAT replaces banking apps with trojanized versions

Hirudo is a novel Android remote access trojan combining banking malware and full RAT capabilities, delivered via droppers embedded in seemingly legitimate shopping, adult video, and short drama apps. Hirudo detects specific banking apps, displays fake update prompts, replaces them with trojanized v

Earlier

2026-10-14 (10 events) · 2026-10-13 (12 events) · 2026-10-12 (11 events) · 2026-10-11 (4 events) · 2026-10-10 (10 events) · 2026-10-09 (10 events) · 2026-10-08 (10 events) · 2026-10-07 (12 events) · 2026-10-06 (13 events) · 2026-10-05 (11 events) · 2026-10-04 (9 events) · 2026-10-03 (9 events) · 2026-10-02 (11 events) · 2026-10-01 (10 events) · 2026-09-30 (12 events) · 2026-09-29 (10 events) · 2026-09-28 (11 events) · 2026-09-27 (10 events) · 2026-09-26 (10 events) · 2026-09-25 (11 events) · 2026-09-24 (11 events) · 2026-09-23 (12 events) · 2026-09-22 (12 events) · 2026-09-21 (10 events) · 2026-09-20 (6 events) · 2026-09-19 (10 events) · 2026-09-18 (10 events) · 2026-09-17 (13 events) · 2026-09-16 (10 events) · 2026-09-15 (11 events) · 2026-09-14 (11 events) · 2026-09-13 (5 events) · 2026-09-12 (6 events) · 2026-09-11 (10 events) · 2026-09-10 (10 events) · 2026-09-09 (11 events) · 2026-09-08 (10 events) · 2026-09-07 (10 events) · 2026-09-06 (4 events) · 2026-09-05 (9 events) · 2026-09-04 (10 events) · 2026-09-03 (11 events) · 2026-09-02 (11 events) · 2026-09-01 (10 events) · 2026-08-31 (11 events) · 2026-08-30 (7 events) · 2026-08-29 (10 events) · 2026-08-28 (11 events) · 2026-08-27 (11 events) · 2026-08-26 (11 events) · 2026-08-25 (12 events) · 2026-08-24 (11 events) · 2026-08-23 (9 events) · 2026-08-22 (10 events) · 2026-08-21 (13 events) · 2026-08-20 (12 events) · 2026-08-19 (10 events) · 2026-08-18 (12 events) · 2026-08-17 (14 events) · 2026-08-16 (10 events) · 2026-08-15 (10 events) · 2026-08-14 (10 events) · 2026-08-13 (10 events) · 2026-08-12 (10 events) · 2026-08-11 (10 events) · 2026-08-10 (11 events)