Browsing: Cyber Security

CVE-2026-103849, also called BlockStrap, is a CVSS 10.0 Magento and Adobe Commerce flaw that gives remote code execution. Sansec expects attacks soon.

Attackers are exploiting CVE-2026-110447, a command injection flaw in the Collabora CODE app for Nextcloud, planting webshells since mid-September.

Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE flaw scored 8.6 and exploited in attacks. CISA wants federal agencies fixed by October 17.

Microsoft’s October 2026 Patch Tuesday fixes a record 1,411 flaws including three zero-days, and Windows 11 24H2 Home and Pro have reached end of support.

GhostAction attackers are planting fake security audit workflows in GitHub Actions, stealing AWS keys and API tokens from tens of thousands of repositories.

Florida, Iowa, Montana and Nebraska have sued TP-Link over router security claims and its China ties, taking the total to five US states.

Attackers breached .gh, .sl and .as domain registries to obtain fake HTTPS certificates for Google domains. Google has blocked them in Chrome.

WhatsApp is testing a login block for devices running outdated Android and iOS software. Users may need to update their phone before logging in again.

Latest updates on cyber security and why Indian users need to know about the changes coming in 2026.

The Black Hat USA 2026 conference showcased a range of new security vulnerabilities that affect everything from IoT devices to cloud infrastructure. R