Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open

October 29, 2026

Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control...

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

October 29, 2026

Ravie LakshmananOct 29, 2026Vulnerability / Cyber Espionage The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security...

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

October 29, 2026

Ravie LakshmananOct 29, 2026Vulnerability / Network Security Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently...

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent...

Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.

Swati KhandelwalOct 28, 2026Mobile Security / App Security Third-party Android app stores can now apply to Google for permission to...

Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a...

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Ravie LakshmananOct 28, 2026Vulnerability / Cyber Espionage Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence...

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Ravie LakshmananOct 28, 2026Vulnerability / Enterprise Security Threat actors are beginning to probe for a newly patched critical vulnerability in...

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers