CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for ...
-
The Hacker News
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant ...
-
security.nl
Ivanti waarschuwt voor misbruik van lek in Connect Secure vpn-servers
Ivanti waarschuwt klanten voor actief misbruik van een kwetsbaarheid in Ivanti Connect Secure vpn-servers. Via het beveiligingslek (CVE-2026-104935) kan een ongeauthenticeerde aanvaller willekeurige c ...
-
security.nl
Franse overheid adviseert supermarkten om koelsystemen offline te halen
De Franse overheid adviseert supermarkten en andere bedrijven om hun koelsystemen offline te halen. In het geval van gehackte koelinstallaties wordt aangeraden om een fabrieksreset uit te voeren. Volg ...
-
cert.pl
Vulnerability in Payload CMS software
Vulnerability in Payload CMS software CVE ID CVE-2026-63316 Publication date 13 October 2026 Vendor Payload Product Payload CMS Vulnerable versions All before 3.90.0From 4.0.0-canary.0 to 4.0.0-canary ...
-
security.nl
GitLab waarschuwt voor kritiek beveiligingslek met CVSS 10.0-score
GitLab waarschuwt ontwikkelaars en organisaties voor een kritieke kwetsbaarheid in de software die een CVSS-impactscore van 10.0 op een schaal van 1 tot en met 10 heeft. GitLab is een populaire online ...
-
The Hacker News
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The ...
-
The Hacker News
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. ...
-
The Hacker News
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has re ...
-
Dark Reading
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Rob Wright,Senior News Director,Dark ReadingOctober 12, 20264 Min ReadSource: Michael Vi via Alamy Stock PhotoSonicWall customers are on the defensive once again, as threat actors are actively exploit ...