CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor ...
-
Dark Reading
'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink
4 Min ReadSource: ratpack223 via Getty ImagesA likely Russian threat actor is deploying a sophisticated malware implant capable of harvesting credentials, scanning internal networks, and capturing liv ...
-
Dark Reading
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
Rob Wright,Senior News Director,Dark ReadingSeptember 14, 20263 Min ReadSource: Infinite Creations via Getty ImagesThreat actors are exploiting a maximum-severity GitLab vulnerability disclosed last w ...
-
The Hacker News
3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
An attacker was operating inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCen ...
-
The Hacker News
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as p ...
-
Krypt3ia
Weekly ALL-SOURCE Cyber Warfare Intelligence Brief 9.14.26
Reporting period: September 7–14, 2026Scope: State and state-aligned cyber operations, APT activity, technical campaign intelligence, active exploitation, and cyber-enabled military/intelligence activ ...
-
cert.pl
Vulnerabilities in Alior Bank "raty" module for PrestaShop
Vulnerabilities in Alior Bank "raty" module for PrestaShop CVE ID CVE-2026-7848 Publication date 14 September 2026 Vendor Alior Bank Product raty Vulnerable versions From 8.0.0 to 8.1.11 Vulnerability ...
-
The Hacker News
⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great ...
-
security.nl
Kritiek VMware vCenter-lek gebruikt bij ransomware-aanvallen
Een kritieke kwetsbaarheid in VMware vCenter wordt actief gebruikt bij ransomware-aanvallen, zo meldt het Amerikaanse cyberagentschap CISA. Updates voor het beveiligingslek (CVE-2026–59310) zijn sinds ...
-
security.nl
Gebruikers Chinese keyboard-app Sogou via lek besmet met backdoor
Aanvallers hebben een kwetsbaarheid in de Chinese keyboard-app Sogou gebruikt om gebruikers met een backdoor te infecteren. Ontwikkelaar Tencent heeft versie 16.3.0.3498 via een automatische update on ...