The company briefly disabled access to its RMM platform after an independent researcher warned of critical flaws.
CVE-2026-126793 – Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper
Bulletin ID: 2026-182-AWS Publication Date: 11/12/2026 13:00 PM PST Description: An untrusted search path issue in Aurora PostgreSQL dialect detection in…
Five TEFAF robbery suspects added to EU Most Wanted
As of 29 October 2026, five new fugitives, four men and one woman, have been added to the EU Most Wanted list. According to the Limburg Public…
Anthropic’s Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says
VulnCheck’s Patrick Garrity has found that seven months on, Project Glasswing resulted in only 217 vulnerabilities getting fixed, despite thousands…
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
An iOS sandbox escape published on GitHub lets an app read other apps’ files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and…
Microsoft’s AI bug hunter finds Rust flaw that went undetected for nearly 11 years
Microsoft researchers have uncovered a memory-safety bug in Rust’s standard library that had gone undetected for nearly 11 years, alongside other flaws…
AI Makes Reverse Engineering Mainstream Software & Malware Far Easier
Researchers unpacked, mapped, and recreated complex software and the Turla malware, raising opportunities and concerns for organizations and cybersecurity…
New OpenSSH Vulnerability
It’s a bad one , and it’s been in the code for a decade: A newly disclosed flaw involving OpenSSH and musl, dubbed “*sshole,” allows attackers to log in…
Lessons from 59 Linux Kernel Bug Reports
Microsoft FORGE Lab researchers used codename MDASH to investigate Linux kernel vulnerabilities, resulting in 59 upstream bug reports, 33 assigned CVEs,…
TSMC has reportedly leaked the personal data of 46,000 employees, but emphasized that no evidence of intrusion was found in the system.
The following is an automated Google translation of an article that originally appeared in Chinese. Jian Yongxiang reports: TSMC, the world’s leading…
N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public
N-able fixes seven N-central CVEs after 33 alleged zero-days are published
Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation
Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in…
Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under India’s DPDP Law: K7 CyberSecurity
CXO Today reports: A ransomware attack that locks up corporate systems can legally qualify as a reportable personal data breach in India—even if hackers…
Extortion Group Luna Moth Flits Into Law Firms a Second Time
The cybercriminals are re-targeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access…
OffSec Celebrates 20 Years of Practitioner-Built Training From the Creators of Kali Linux and OSCP
New York, USA, 10th November 2026, CyberNewswire OffSec Celebrates 20 Years of Practitioner-Built Training From the Creators of Kali Linux and OSCP on…
Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services
A Microsoft outage disrupted Outlook, Teams and Copilot, also breaking OpenAI and Anthropic connectors to Microsoft 365 accounts. Microsoft 365, Outlook…
Default Admin Password Let Researchers Unlock and Start Cars
Default admin password on automaker login servers let researchers unlock and start test cars
Beyond the Alert: The Case for Rich Network Data
At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have…
Security Agencies Worldwide Found to Use Ad-Based Surveillance System
An investigation by Bloomberg into Penlink’s ad-based surveillance system Webloc builds off Citizen Lab research, identifying additional customers.
CISA sets operational priorities for partnerships, risk assessments and systemic action
An internal memo from CISA’s acting chief instructs senior leaders to keep the new priorities in mind with every choice they make.
Google DeepMind melds humans and AI agents to vet Signal’s secure messaging techniques
Post-quantum handshake and Triple Ratchet get a formal security check
Zoom Issues Critical Security Update: Windows Users Urged to Patch 9.6-Severity Flaw
Zoom fixes two Windows security vulnerabilities, including a critical 9.6-rated flaw. Learn who’s affected, the risks, and how to update.
Amplifon Americas Data Breach Exposes Personal and Medical Information of 1.3 Million People
Hearing healthcare company Amplifon Americas has revealed a data breach which has led to personal information being exposed for around 1.33 million people…
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide
Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report…