CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
security.nl
Filipijns nucleair onderzoeksinstituut gehackt via kritiek ownCloud-lek
Aanvallers hebben een Filipijns nucleair onderzoeksinstituut door middel van een bekende kritieke kwetsbaarheid in ownCloud weten te hacken, zo meldt cybersecuritybedrijf Hunt.io. Bij de aanval zou ne ...
-
The Hacker News
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vuln ...
-
The Hacker News
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The comp ...
-
security.nl
Beveiligingslek in IPv6-systeem Linux-kernel misbruikt bij aanvallen meldt VS
Een beveiligingslek in een IPv6-subsysteem van de Linux-kernel wordt misbruikt bij aanvallen, zo waarschuwt het Amerikaanse cyberagentschap CISA. Via de kwetsbaarheid (CVE-2026-53362) kan een aanvalle ...
-
Huntress
PaperCut Zero-Day: Active Exploitation and Pre-Auth RCE
Acknowledgements: Special thanks to Tanner Filip, Jai Minton, Max Rogers, Ben Nahorney, Lindsey Welch, Aaron Deal, Dray Agha, Lindon Wass, Michael Elford, and Craig Sweeney for their contributions to ...
-
TheCyberThrone
Next.js Patches Two Critical RCE Vulnerabilities: AVIF Processing and Windows Path Traversal
Next.js has released security updates for two critical vulnerabilities that can lead to unauthenticated remote code execution.The two vulnerabilities are separate and affect different deployment scena ...
-
The Hacker News
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior ...
-
The Hacker News
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable ...
-
The Hacker News
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine.The rest of the week gets stranger: botnets borrowi ...
-
cert.pl
Vulnerabilities in dool software
Vulnerabilities in dool software CVE ID CVE-2026-56651 Publication date 27 August 2026 Vendor scottchiefbaker Product dool Vulnerable versions All through 1.3.8 Vulnerability type (CWE) Improper Link ...