CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
cert.pl
Vulnerabilities in Edito CMS software
Vulnerabilities in Edito CMS software CVE ID CVE-2026-59074 Publication date 13 November 2026 Vendor Edito Product Edito CMS Vulnerable versions All before 5.10.2607 Vulnerability type (CWE) Improper ...
-
The Hacker News
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files
An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously unreported local privilege ...
-
The Hacker News
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
N-able on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell. "We are restricting certain N-central feat ...
-
TheCyberThrone
Citrix NetScaler: When the Enterprise Gateway Becomes the Risk
The StoryEnterprise security often focuses on protecting endpoints, applications and cloud workloads. But what happens when the infrastructure connecting all of them becomes the problem?Citrix NetScal ...
-
The Hacker News
ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories
A search result isn't always safe. An access request isn't always harmless. And a familiar account doesn't always mean a familiar person is using it. Simple things to remember. Yet a surprising amount ...
-
The Hacker News
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a l ...
-
The Hacker News
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and whil ...
-
The Hacker News
Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
Ravie LakshmananNov 12, 2026Vulnerability / Network Security Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console ...
-
The Hacker News
SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths
The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a now-patched critical security flaw in the remote access software, and not a new vulnerability, it ha ...
-
TheCyberThrone
Apache HTTP/2: Race to RCE – CVE-2026-119618
One vulnerable HTTP/2 implementation. A memory corruption flaw. A potential entry point into exposed web servers.Apache HTTP Server remains one of the most widely deployed web servers across enterpris ...