CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain con ...
-
security.nl
Citrix waarschuwt voor nieuw lek dat remote code execution mogelijk maakt
Citrix waarschuwt voor een nieuwe kritieke kwetsbaarheid in Citrix NetScaler ADC en Citrix NetScaler Gateway die remote code execution mogelijk maakt en tot een denial of service kan leiden. Klanten w ...
-
TheCyberThrone
Critical NetScaler RCE Vulnerability CVE-2026-107406
Executive SummaryCitrix has disclosed CVE-2026-107406, a critical memory overflow vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway under specific SAML authentication configurations. ...
-
Huntress
Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer
Acknowledgements: Special thanks to Dipo Rodipe, John Hammond, Susannah Matt, Ben Nahorney, and Lindsey Welch for their contributions to this investigation and writeup. Update 10/8/26 @ 6pm ETAfter fu ...
-
The Hacker News
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agenc ...
-
The Hacker News
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Toky ...
-
TheCyberThrone
CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000
A new critical vulnerability in SonicWall SMA1000 appliances deserves immediate attention from organizations using the platform as an internet-facing remote-access gateway.Tracked as CVE-2026-102255, ...
-
security.nl
Google komt met update voor kritiek bluetooth-lek in Pixel-telefoons
Google heeft een beveiligingsupdate voor Pixel-telefoons uitgebracht die meerdere beveiligingslekken verhelpt, waaronder een kritieke bluetooth-kwetsbaarheid. Van de in totaal zes kwetsbaarheden in he ...
-
cert.pl
Vulnerability in Ollama software
Vulnerability in Ollama software CVE ID CVE-2026-103663 Publication date 08 October 2026 Vendor Ollama Product Ollama Vulnerable versions From 0.34.2 to 0.35.0 Vulnerability type (CWE) Relative Path T ...
-
The Hacker News
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign ...