CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
Dark Reading
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Rob Wright,Senior News Director,Dark ReadingOctober 12, 20264 Min ReadSource: Michael Vi via Alamy Stock PhotoSonicWall customers are on the defensive once again, as threat actors are actively exploit ...
-
The Hacker News
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone d ...
-
TheCyberThrone
CVE-2026-97229: Critical GitLab Vulnerability Could Allow Remote Code Execution
October 12, 2026GitLab has addressed CVE-2026-97229, a critical vulnerability in its CI/CD Regular Expression Compiler that could allow an unauthenticated attacker to execute arbitrary code on a vulne ...
-
The Hacker News
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tra ...
-
The Hacker News
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2 ...
-
The Hacker News
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastru ...
-
The Hacker News
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on- ...
-
The Hacker News
TP-Link Sued by Four More U.S. States Over Router Security and China Ties
Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California compa ...
-
security.nl
SonicWall SMA1000-kwetsbaarheid actief misbruikt bij aanvallen
vrijdag 9 oktober 2026, 15:00 door Redactie, 0 reactiesLaatst bijgewerkt: 09-10-2026, 15:05 Een kritieke kwetsbaarheid in de SonicWall SMA1000-gateway, met een maximale CVSS-impactscore van 10.0, word ...
-
security.nl
SonicWall SMA1000-kwetsbaarheid actief misbruik bij aanvallen
vrijdag 9 oktober 2026, 15:00 door Redactie, 0 reactiesLaatst bijgewerkt: Vandaag, 15:05 Een kritieke kwetsbaarheid in de SonicWall SMA1000-gateway, met een maximale CVSS-impactscore van 10.0, wordt a ...