October 20, 2026

Vulnerability

Drupal RCE vulnerability CVE-2026-108097 in Field UI with public PoC research

Technical Details and PoC Exploit Published for Critical Drupal Field UI RCE (CVE-2026-108097)

Do Son October 20, 2026 0
OpenBSD kernel vulnerability local privilege escalation PoC exploit published by Calif

Full Details and PoC Exploit Released for 37-Year-Old OpenBSD Kernel Bug That Grants Root

Do Son October 20, 2026 0
Redis RESTORE vulnerability CVE-2026-25243 exploited in the wild against Redis servers

Redis RESTORE Flaw CVE-2026-25243 Now Exploited in the Wild, Honeypots Show

Do Son October 20, 2026 0
Siemens Software Center vulnerability CVE-2026-110936 exploited in the wild via DLL sideloading

Siemens Confirms Software Center Flaw CVE-2026-110936 Exploited in the Wild in ClickFix Attacks

Do Son October 20, 2026 0

Cyber Security

Ahold Delhaize Cyberattack Knocks Brand Websites and Apps Offline in US and Europe Ahold Delhaize cyberattack - Albert Heijn outage as grocery brand websites and apps go offline

Ahold Delhaize Cyberattack Knocks Brand Websites and Apps Offline in US and Europe

October 20, 2026 0
UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering Diagram of the AOMEI supply chain attack and AOMEI supply chain attack UNC7017 update workflow #AOMEISupplyChainAttack #UNC7017

UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering

October 19, 2026 0
UAT-6275 Threat Actor Targets CIS Governments Using WinRAR Exploit Victimology map showing UAT-6275 and UAT-6275 threat actor activity across CIS countries

UAT-6275 Threat Actor Targets CIS Governments Using WinRAR Exploit

October 16, 2026 0
Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man Splash page displayed on seized domains from the CoGUI phishing kit and CoGUI phishing kit takedown

Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man

October 15, 2026 0

Malware Alert

Qilin, Inc and Settra Ransomware Gangs Exploit PAN-OS Flaw CVE-2026-0257 for VPN Access CVE-2026-0257 GlobalProtect authentication bypass exploited by ransomware gangs to open VPN sessions

Qilin, Inc and Settra Ransomware Gangs Exploit PAN-OS Flaw CVE-2026-0257 for VPN Access

October 20, 2026 0
OVHcloud CLI Attack Swaps Release Binaries With a Secret-Stealing Build OVHcloud CLI attack in a supply chain attack that replaced GitHub release binaries with a secret-stealing build

OVHcloud CLI Attack Swaps Release Binaries With a Secret-Stealing Build

October 20, 2026 0
AdFection Spyware Attack Targets Al Jazeera Devices AdFection spyware attack diagram showing a malicious ad bid delivering Candiru code to an Al Jazeera device, linked to Discover-Tech

AdFection Spyware Attack Targets Al Jazeera Devices

October 20, 2026 0
GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps GhostBat RAT and Android GhostBat RAT Ghost Overlay attack chain diagram

GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps

October 16, 2026 0

Data Leak

Sourcenext Data Breach Exposes 22.5M User Records Sourcenext data breach notice revealing API exploitation and account password exposure

Sourcenext Data Breach Exposes 22.5M User Records

October 20, 2026 0
OpenCode Security Breach Exposes 1.4% of Console Users OpenCode security breach exposing stored third-party API keys in OpenCode Console, linked to an AI distillation attack

OpenCode Security Breach Exposes 1.4% of Console Users

October 20, 2026 0
UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites UpdraftPlus data breach - stolen keys used in UpdraftCentral backdoor attacks on WordPress sites

UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites

October 20, 2026 0
Ricardo Data Leak Exposes User Contact Details Ricardo data leak illustration highlighting the SMG security vulnerability.

Ricardo Data Leak Exposes User Contact Details

October 9, 2026 0
Next Page ❯