UK Legal Aid Agency: Hackers stole records dating back to 1978
Severity: HighAction: Be aware
Live feed
Important stories
Everything we publish, newest first. This feed is never personalized or filtered unless you choose a filter.
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
Severity: CriticalAction: Act nowExploitation: Exploited
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Ledger asks sellers across Asia to halt sales after supply-chain attack
Severity: HighAction: Be aware
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Severity: CriticalAction: Act nowExploitation: Exploited
U.K. Sanctions Cryptomus for RU Money Laundering
Severity: HighAction: Be aware
Cyberattack on Connected Fridges in France
Severity: HighAction: Be aware
The Blind Spots of Agentic Pentesting and How to Close Them
Severity: HighAction: Review
Russian travel booking platform suspends reservations after cyberattack
Severity: HighAction: Be aware
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
Severity: CriticalAction: Act nowExploitation: Exploited
VU#166125: Bisheng has authentication bypass vulnerabilities
Severity: HighAction: Review
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
Severity: HighAction: PatchExploitation: Exploited
Palo Alto Networks PAN-OS Code Injection Vulnerability (CVE-2026-0322) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Cisco Secure Email Gateway Relative Path Traversal Vulnerability (CVE-2026-76519) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Ahsay AhsayCBS Command Injection Vulnerability (CVE-2026-105134) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Severity: HighAction: Patch
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Severity: HighAction: Be aware
The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
Severity: HighAction: Be aware
Ghostscript flaw lets hackers hijack servers via PDF uploads
Severity: CriticalAction: Review
Stable Channel Update for Desktop
Severity: CriticalAction: Patch
Extended Stable Update for Desktop
Severity: CriticalAction: Patch
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Severity: CriticalAction: Act nowExploitation: Exploited
VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
Severity: HighAction: Review
VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE
Severity: HighAction: Review
TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
Severity: HighAction: Be aware
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Severity: HighAction: Be aware
Ivanti warns of Connect Secure zero-day exploited in attacks
Severity: CriticalAction: Act nowExploitation: Exploited
Docker Hub flaw let attackers impersonate users, tamper with images
Severity: CriticalAction: Review
SAP warns of maximum severity OAuth2 SSRF security flaw
Severity: HighAction: Patch