CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
TheCyberThrone
CVE-2026-90970: Critical GitLab AI Gateway Vulnerability
October 3, 2026AI infrastructure is quickly becoming part of the enterprise attack surface, and CVE-2026-90970 is a good example of why.Zero-Day Vulnerability ReportsThe vulnerability affects GitLab A ...
-
The Hacker News
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portugues ...
-
The Hacker News
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the se ...
-
The Hacker News
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems. The vulne ...
-
europa.eu
Cyber Brief 26-10 - September 2026
Cyber Brief (September 2026)October 2, 2026 - Version 1TLP:CLEARExecutive summaryWe analysed 358 open source reports for this Cyber Brief1.Relating to cyber policy and law enforcement, Dutch police ar ...
-
Dark Reading
Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
5 Min ReadOn Sept. 24, threat detection firm GreyNoise Intelligence observed a single US-based IP address scanning for Citrix NetScaler installations and conducting remote code execution (RCE) attacks ...
-
Dark Reading
SWIFT Banking & Government Middleware Enables RCE
5 Min ReadSource: years via Getty ImagesResearchers have discovered a critical vulnerability in a hardware authentication program used to access highly sensitive global government and financial system ...
-
TheCyberThrone
FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286
October 2, 2026Executive SummaryFortinet has confirmed active exploitation of a critical FortiMail zero-day, CVE-2026-104286. The vulnerability carries a CVSS score of 9.8 and can allow an unauthentic ...
-
Kaspersky
110 vulnerabilities fixed in Google Pixel devices | Kaspersky official blog
On September 15 this year, Google published details of patches for 110 vulnerabilities in its own Google Pixel smartphones. Among all the disclosed flaws, CVE-2026-58704 stands out the most, for it ap ...
-
security.nl
Finse organisaties gehackt via Citrix-lekken meldt Finse overheid
Meerdere organisaties in Finland zijn via kwetsbaarheden in Citrix NetScaler gehackt, zo heeft de Finse overheid gisterenavond bekendgemaakt. Om hoeveel organisaties het precies gaat en in welke secto ...