CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Cyber Express
CleanTalk WordPress Plugin Vulnerability Puts 200,000 Sites at Risk
A WordPress plugin vulnerability has placed as many as 200,000 websites at potential risk, following the disclosure of a severe flaw in the CleanTalk Anti-Spam plugin. The issue, tracked as CVE-2026-1 ...
-
CybersecurityNews
Apache NiFi Vulnerability Enables Authorization Bypass
Apache NiFi Vulnerability A newly disclosed high-severity vulnerability in Apache NiFi exposes systems to an authorization bypass that could allow lower-privileged users to modify restricted component ...
-
CybersecurityNews
Langchain Community SSRF Bypass Vulnerability Enables Access to Internal Services
Langchain Community SSRF Bypass Vulnerability A Server‑Side Request Forgery (SSRF) vulnerability has been identified in the langchain/community package, affecting versions up to 1.1.13. The flaw, trac ...
-
Daily CyberSecurity
Apache NiFi Flaw (CVE-2026-25903) Lets Users Bypass Restrictions
Apache NiFi, the powerhouse engine that automates cybersecurity, observability, event streams, and generative AI data pipelines for thousands of companies worldwide, has disclosed a significant securi ...
-
TheCyberThrone
Google Patches First Chrome Zero-Day of 2026
February 17, 2026CVE-2026-2441 is a high-severity use-after-free vulnerability in Google Chrome’s CSS processing component. It affects versions prior to 145.0.7632.75 and allows remote attackers to po ...
-
Daily CyberSecurity
Hiding in Plain Sight: APT28’s “Operation MacroMaze” Hits European Govs
A new cyberespionage campaign attributed to the notorious Russian state-sponsored group APT28 (also known as Fancy Bear or Forest Blizzard) has been uncovered targeting government entities in Western ...
-
CybersecurityNews
Single IP Dominates Exploitation Campaign Attacking Ivanti EPMM with RCE Vulnerability
Single IP Dominates Ivanti EPMM with RCE Vulnerability A critical remote code execution (RCE) flaw in Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2026-1281, is being heavily exploited. GreyN ...
-
Kaspersky
Key OpenClaw risks, Clawdbot, Moltbot | Kaspersky official blog
Everyone has likely heard of OpenClaw, previously known as “Clawdbot” or “Moltbot”, the open-source AI assistant that can be deployed on a machine locally. It plugs into popular chat platforms like Wh ...
-
The Hacker News
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware
This week’s recap shows how small gaps are turning into big entry points. Not always through new exploits, often through tools, add-ons, cloud setups, or workflows that people already trust and rarely ...
-
The Register
Google patches Chrome zero-day as in-the-wild exploits surface
Google has quietly pushed out an emergency Chrome fix after attackers were caught exploiting the browser's first reported zero-day of 2026. The flaw, tracked as CVE-2026-2441 and assigned a "high" CVS ...