CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. Accord ...
-
The Hacker News
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on Oct ...
-
The Hacker News
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks ...
-
Cloudflare Blog
Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities
The recent disclosure of a major vulnerability in Citrix NetScaler pointed to a widespread weak point: a login page is an attack surface that can be used to compromise and access an application server ...
-
security.nl
Onderzoekers verwachten aanvallen op webwinkels via kritiek Magento-lek
Onderzoekers verwachten dat aanvallers snel misbruik zullen maken van een kritieke kwetsbaarheid in webshopsoftware Adobe Commerce en Magento voor het aanvallen van webwinkels. Het beveiligingslek, aa ...
-
security.nl
Drupal waarschuwt voor kritieke RCE-lekken waardoor sites zijn over te nemen
De makers van het contentmanagementsysteem Drupal waarschuwen voor twee kritieke kwetsbaarheden die remote code execution mogelijk maken, waardoor aanvallers kwetsbare websites kunnen overnemen. De pr ...
-
TheCyberThrone
F5 Addresses Multiple NGINX Vulnerabilities in October Security Update
F5 and the NGINX project released security fixes on October 14, 2026, addressing five vulnerabilities in NGINX Open Source and NGINX Plus. The issues affect memory handling, HTTP/3 request processing ...
-
Dark Reading
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
5 Min ReadSource: ZU_09 via Getty ImagesA week chock full of new high-severity and actively exploited edge vulnerabilities continues with a Chinese cyberattack built around a critical flaw in BeyondTr ...
-
TheCyberThrone
CVE-2026-102764: BeyondTrust Remote Support Vulnerability Exploited in the Wild
Remote support tools help IT teams access and troubleshoot systems from anywhere. But when one of these tools is compromised, the impact can extend far beyond the platform itself, particularly when it ...
-
cert.pl
Vulnerability in NordVPN software
Vulnerability in NordVPN software CVE ID CVE-2026-106030 Publication date 16 October 2026 Vendor Nord Security Product NordVPN Vulnerable versions All before 8.12 Vulnerability type (CWE) Incorrect Au ...