CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
Dark Reading
Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour
7 Min ReadSource: cagkansayin via Getty ImagesRead in English: Click HereThis translation is provided by our internal AI translation tool.Des centaines de supermarchés français ont subi cette semaine ...
-
The Hacker News
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October ...
-
The Hacker News
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
But those big headlines are only half the story. Stolen passwords, exposed databases, broken login checks, and trusted tools being turned against their users are causing trouble too. Some attacks are ...
-
cert.pl
Vulnerability in MTW CleanShot X software
Vulnerability in MTW CleanShot X software CVE ID CVE-2026-16477 Publication date 22 October 2026 Vendor MTW Product CleanShot X Vulnerable versions From 4.0.0 to 4.5.2 Vulnerability type (CWE) Deseria ...
-
TheCyberThrone
GitLab Releases Critical Security Patches
GitLab released a critical patch update on October 21, 2026, fixing 12 security vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE).The release includes a critical remote cod ...
-
nextron-systems.com
PHP2SHELL Detection Coverage in THOR
THOR applies Sigma rules to supported log data on an endpoint during a scan. For PHP2SHELL, this means looking for exploit-related artifacts in web-server logs and for recorded post-exploitation activ ...
-
Schneier on Security
New Serious PHP Vulnerabilities Released and Patched
PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All P ...
-
The Hacker News
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Cont ...
-
The Hacker News
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bun ...
-
TheCyberThrone
Cisco Releases October 2026 Security Updates for Unified Communications Products
October 22, 2026Cisco has released security updates for multiple Unified Communications products, addressing eight vulnerabilities across different weakness categories. Published on October 21, 2026, ...