VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
Severity: HighAction: Review
Live feed
Important stories
Everything we publish, newest first. This feed is never personalized or filtered unless you choose a filter.
VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE
Severity: HighAction: Review
TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
Severity: HighAction: Be aware
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Severity: HighAction: Be aware
Ivanti warns of Connect Secure zero-day exploited in attacks
Severity: CriticalAction: Act nowExploitation: Exploited
Docker Hub flaw let attackers impersonate users, tamper with images
Severity: CriticalAction: Review
SAP warns of maximum severity OAuth2 SSRF security flaw
Severity: HighAction: Patch
Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers
Severity: HighAction: Be aware
South African clothing retailer Foschini Group investigating cyberattack on British fashion brands
Severity: HighAction: Be aware
Inductive Automation Ignition Software
Severity: HighAction: Review
Microsoft Windows Command Injection Vulnerability (CVE-2026-96951) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (CVE-2026-104935) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Cyberattack Prompts Ahold Delhaize to Disconnect Systems
Severity: HighAction: Be aware
Refrigeration Controller Hack Spoils Food Across European Supermarkets
Severity: HighAction: Be aware
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Severity: HighAction: Review
Prominent Ransomware Negotiator Faces Extortion Charges
Severity: HighAction: Be aware
Anthropic takes risky AI tests offline after models breach govt sites
Severity: HighAction: Be aware
Cyberattack shuts down refrigerators at French supermarkets
Severity: HighAction: Be aware
VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
Severity: HighAction: Review
Retail giant Ahold Delhaize takes systems offline after cyberattack
Severity: HighAction: Be aware
GitLab warns of max severity code execution vulnerability
Severity: HighAction: Patch
iRhythm Data Breach Impacts at Least 360,000 People
Severity: HighAction: Be aware
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
Severity: HighAction: Be aware
Critical SonicWall Vulnerability Exploited Days After Disclosure
Severity: CriticalAction: Patch
Cyberattack disrupts refrigeration at hundreds of French supermarkets
Severity: HighAction: Be aware
Cyber exec arrested in case allegedly tied to ShinyHunters hackers
Severity: HighAction: Be aware
Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
Severity: HighAction: Be aware
FBI Arrests Founder of Ransomware Negotiation Firm
Severity: HighAction: Be aware
Stable Channel Update for ChromeOS / ChromeOS Flex
Severity: CriticalAction: Patch