CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, to its Known Explo ...
-
TheCyberThrone
CISA KEV Weekly Roundup – Week 46
12 Exploited Vulnerabilities Across Enterprise Infrastructure, Security Gateways and ApplicationsExploit Prevention ToolsThe CISA KEV Catalog continues to be an important source of exploitation intel ...
-
Huntress
Attackers use Crypto Exchange Names to Disguise Unauthorized Sessions on 100+ ScreenConnect Servers
BackgroundOn November 12, 2026, an MSP asked us about a handful of unfamiliar machines in their self-hosted ScreenConnect console. Named after various crypto exchanges, the machines had no apparent co ...
-
The Hacker News
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this ...
-
The Hacker News
New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs
Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server's operator out. One of them, Mior, can als ...
-
cert.pl
Vulnerabilities in Edito CMS software
Vulnerabilities in Edito CMS software CVE ID CVE-2026-59074 Publication date 13 November 2026 Vendor Edito Product Edito CMS Vulnerable versions All before 5.10.2607 Vulnerability type (CWE) Improper ...
-
The Hacker News
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files
An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously unreported local privilege ...
-
The Hacker News
Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2
N-able on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent2Shell. "We are restricting certain N-central feat ...
-
TheCyberThrone
Citrix NetScaler: When the Enterprise Gateway Becomes the Risk
The StoryEnterprise security often focuses on protecting endpoints, applications and cloud workloads. But what happens when the infrastructure connecting all of them becomes the problem?Citrix NetScal ...
-
The Hacker News
ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories
A search result isn't always safe. An access request isn't always harmless. And a familiar account doesn't always mean a familiar person is using it. Simple things to remember. Yet a surprising amount ...