CISA

Global impact and government responses to PHP2Shell

13 clusters · 230 sources · last updated about 20 hours ago

Latest: PHP vulnerabilities prompt global security response

The security crisis surrounding the PHP vulnerabilities known as ‘PHP2Shell’ (CVE-2026-109618 and CVE-2026-109619) has escalated into a global cybersecurity emergency. These flaws, carrying a severity rating of 9.2 out o

CISA vulnerability exploitation and patching directives

14 clusters · 52 sources · last updated about 20 hours ago

Latest: Cisco patches high-severity VPN zero-day vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has continued issuing directives to federal agencies regarding multiple actively exploited software vulnerabilities. Following the September 9, 2026, addit

Microsoft Windows 11: 26H2 Rollout & Feature Updates

122 clusters · 477 sources · last updated 1 day ago

Latest: Microsoft rolls out Windows 11 updates for menu customization

Microsoft is advancing the Windows 11 26H2 rollout, focusing on hardware accessibility, system recovery, and UI flexibility. The update is delivered as a lightweight enablement package for users on versions 24H2 and 25H2

PHP emergency patching and RCE vulnerability response

5 clusters · 911 sources · last updated 2 days ago

Latest: PHP2Shell vulnerabilities expose millions of web servers to remote takeover

The PHP security team has released emergency patches to address critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on the CVSS v4.0 scale. The accelerated release follows

Brotli compression library vulnerability

4 clusters · 18 sources · last updated 2 days ago

Latest: Brotli compression vulnerability CVE-2026-111497 triggers urgent security updates

A critical security vulnerability, identified as CVE-2026-111497 and nicknamed ‘Broccoli2Shell’, ‘Node2Shell’, or ‘Brotli2Shell’, has been discovered in the Brotli decompression library. The flaw originates from an out-o

AI integration: security, infrastructure, and workforce

40 clusters · 559 sources · last updated 2 days ago

Latest: AI Infrastructure Market: Growth in Edge Computing and Server CPUs

The integration of generative AI faces multifaceted security, economic, and pedagogical hurdles. In the corporate sector, ‘Shadow AI’ remains a critical risk, with 32 percent of German executives admitting to its use. Se

AI phishing evolution and AfD data breach fallout

33 clusters · 215 sources · last updated 2 days ago

Latest: AfD leadership faces scrutiny following massive data leak

The cyber-threat landscape is undergoing a rapid transformation driven by ‘phishing 3.0’, where AI agents automate research and adaptation to conduct multi-channel attacks using deepfakes, manipulated voices, and videos.

Enterprise AI scaling faces governance and regulatory shifts

138 clusters · 590 sources · last updated 3 days ago

Latest: Enterprise AI governance focuses on security, autonomy, and data controls

By late 2026, the gap between AI adoption and cybersecurity preparedness has widened. While AI has transitioned to core infrastructure within U.S. state governments, the ISACA 2026 State of Cybersecurity report notes tha

Cybersecurity and disinformation threats during US midterms

5 clusters · 10 sources · last updated 3 days ago

Latest: FBI and security experts warn of election-themed scams

Cybersecurity experts and federal agencies have identified increasing threats targeting the 2026 US midterm elections. Initial reports from Check Point Software Technologies highlighted a convergence between legitimate p

Atlassian and Oracle software security vulnerabilities

3 clusters · 4 sources · last updated 4 days ago

Latest: Atlassian and VeloCloud report critical security vulnerabilities

In early October 2026, Atlassian disclosed a critical arbitrary file access vulnerability (CVE-2026-21589) affecting eight Data Center products, including Confluence, Bitbucket, and Jira Software. The flaw, carrying a CV

Arista VeloCloud Orchestrator vulnerability exploitation

2 clusters · 11 sources · last updated 5 days ago

Latest: CISA flags critical vulnerabilities in Collabora Online and Arista VeloCloud

Arista Networks identified and released patches for a critical zero-day SQL injection vulnerability in its VeloCloud Orchestrator (VCO), tracked as CVE-2026-114625. The flaw, which carries a CVSS score of 9.9, allows an

Child abuse and homicide investigations in Italy

3 clusters · 25 sources · last updated 5 days ago

Latest: Tortona: Mother arrested for killing three-year-old daughter

Authorities in Italy have conducted separate investigations involving the abuse and death of minors in different regions. In Tortora, Calabria, a woman and her partner were arrested following an investigation into the se

Cybersecurity industry AI defense and vulnerability trends

15 clusters · 82 sources · last updated 8 days ago

Latest: Cybersecurity risks threaten critical infrastructure and hospitals

Cybersecurity firms are expanding capabilities to address threats posed by artificial intelligence. Fortinet has acquired Virtue AI to integrate runtime protection into its FortiAIGate platform, bolstering its ‘Security

Vulnerabilities in Git-based development platforms

7 clusters · 28 sources · last updated 8 days ago

Latest: GitLab releases critical security patches for remote code execution vulnerability

Security researchers and government agencies have identified multiple critical vulnerabilities and data exposures within Git-based development environments. In late August, reports emerged regarding the exposure of 28,00

Zero Trust security implementation challenges

10 clusters · 23 sources · last updated 11 days ago

Latest: NSA issues Zero Trust guidance for critical operational technology

The implementation of Zero Trust security principles, characterized by the mantra “never trust, always verify,” is encountering diverse operational and structural challenges. In higher education, institutions like the Un

Linux kernel privilege escalation and KVM escape flaws

8 clusters · 13 sources · last updated 11 days ago

Latest: PwnEscape vulnerability discovered in Linux kernel network stack

Multiple vulnerabilities in the Linux kernel continue to pose significant security risks, ranging from local privilege escalation to virtual machine escapes. Local privilege escalation risks include ‘Copy Fail’ (CVE-20

Escalating global ransomware and AI-driven cyber threats

24 clusters · 77 sources · last updated 12 days ago

Latest: Cyberattacks rise in Spain as AI drives precision malware

Cyber activity and ransomware attacks saw significant acceleration through 2026. While earlier reports noted a rise in malicious domain registrations and AI-assisted exploitation, new data highlights a 40% year-on-year i

Magento and Adobe Commerce security vulnerabilities

2 clusters · 8 sources · last updated 13 days ago

Latest: Magento and Drupal face critical remote code execution vulnerabilities

Security vulnerabilities have been identified in the Magento and Adobe Commerce web platforms. Initially, reports highlighted the active exploitation of a critical authorization vulnerability, CVE-2026-71362, which CISA

ShinyHunters and Clop cybercrime conflict

13 clusters · 272 sources · last updated 15 days ago

Latest: FBI arrests Canadian negotiator in ShinyHunters hacking crackdown

A public confrontation has emerged between cybercrime syndicates ShinyHunters and Clop. In late September 2026, ShinyHunters reportedly hijacked Clop’s dark web leak site by exploiting an unauthenticated file upload vuln

Browser extension malware and Chrome security overhaul

28 clusters · 98 sources · last updated 16 days ago

Latest: Google Chrome releases security update to patch 37 vulnerabilities

Following the June 2026 discovery of a Turkish-linked malware campaign involving 152 Chrome wallpaper extensions and an emergency patch for a V8 zero-day (CVE-2026-11645), Google began a significant security overhaul. Th

NetScaler product security vulnerabilities

7 clusters · 44 sources · last updated 18 days ago

Latest: Citrix patches critical NetScaler vulnerability

Cloud Software Group has released emergency security updates to address several vulnerabilities in NetScaler ADC and NetScaler Gateway products. Among the initial critical zero-day vulnerabilities were CVE-2026-88771, a

US-led disruption of Flax Typhoon hacking infrastructure

2 clusters · 39 sources · last updated 18 days ago

Latest: U.S. and international partners disrupt Chinese state-sponsored hacking tools

Law enforcement agencies, led by the FBI, DOJ, CISA, and NSA, have conducted operations to disrupt cybercriminal networks and state-sponsored hacking infrastructure. Initial reports detailed the arrest of a Canadian ci

Cybersecurity vulnerabilities in WordPress and Joomla

9 clusters · 24 sources · last updated 20 days ago

Latest: WordPress plugins exploited to create hidden administrators

Cybersecurity experts and agencies, including CISA, have reported an increase in attacks targeting WordPress and Joomla websites. Vulnerabilities in the WordPress ecosystem have risen significantly, with data from Patchs

Global cybersecurity vulnerabilities and Pixel modem exploit

5 clusters · 30 sources · last updated 20 days ago

Latest: Google issues major security patches for Pixel and Android

Global cybersecurity reports indicate a rise in critical vulnerabilities, including significant zero-day exploits and emerging risks associated with artificial intelligence. Major technology companies such as Google, Mic

Cybersecurity awareness and training initiatives

2 clusters · 10 sources · last updated 24 days ago

Latest: Cybersecurity Awareness Month 2026 focuses on infrastructure and training efficacy

Efforts to increase cybersecurity awareness have expanded across military, academic, and critical infrastructure sectors. In the United States Air Force, emphasis is placed on individual responsibility for network defens

Longlegs ransomware attacks on critical infrastructure

2 clusters · 6 sources · last updated 26 days ago

Latest: Warlock ransomware exploits SharePoint flaws to hit critical infrastructure

The China-nexus threat actor known as Longlegs (or Storm-2603) has been deploying Warlock ransomware by exploiting vulnerabilities in on-premises Microsoft SharePoint Server. The group gained prominence in June 2025 thro

Fortinet software security vulnerabilities

2 clusters · 8 sources · last updated 27 days ago

Latest: Fortinet FortiMail zero-day vulnerability actively exploited

Security vulnerabilities have been identified in Fortinet software products. Initial reports highlighted critical flaws in FortiOS and FortiProxy, including CVE-2024-21762 and CVE-2024-23113, which were noted for being e

Linux and open-source software security vulnerabilities

4 clusters · 8 sources · last updated 28 days ago

Latest: Linux and open-source device stacks face surge in security vulnerabilities

The wave of security vulnerabilities across Linux distributions and open-source components has intensified. To manage the increasing frequency of reported flaws, Canonical is transitioning Ubuntu to a new kernel update c

Microsoft Defender zero-day exploit developments

2 clusters · 8 sources · last updated 29 days ago

Latest: Microsoft Defender targeted by new zero-day exploits

Security researcher Abdelhamid Naceri, a former Microsoft employee, released a proof-of-concept exploit called ‘BigDiskBuster’. The tool functions as a denial-of-service attack that prevents Microsoft Defender from compl

Kiteworks cybersecurity threat and system shutdowns

2 clusters · 11 sources · last updated about 1 month ago

Latest: Spectre-v2 BTR vulnerability affects Intel, AMD, and Arm CPUs

Software company Kiteworks issued advisories for customers to perform precautionary system shutdowns following warnings from federal intelligence authorities regarding an imminent cyberattack. Initially, the company reco