Stay Informed

Cybersecurity News

Home / News

Clear

Quick searches: Linux Windows Microsoft 365 AWS OVH VMware WordPress Fortinet Citrix VPN

1368 result(s) for "Check Point" — best match first.

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Check Point — CVE-2026-109618 · CVE-2026-123039
Vulnerability Critical

Check Point gateways hacked through PHP2Shell: the vendor confirms attacks, a backdoor and a wiper

Check Point says attackers exploited the PHP2Shell flaws in the Mobile Access portal of unpatched Security Gateways, then a second bug to become root. On some targets they install…

Check PointFirewallVPN

November 13, 2026 Read more →
ScreenConnect — CVE-2026-127063
Vulnerability Critical

ScreenConnect: a third-party extension with a default secret abused to take over managed machines

ConnectWise is investigating unauthorised access to partner ScreenConnect environments, which it links to RMM+, a third-party extension whose API accepts a default secret (CVE-202…

ConnectWiseScreenConnectRMM

November 13, 2026 Read more →
Mittwald — MCP
Incident High

Mittwald: German web host breached through its AI assistant connector (MCP server)

German hosting provider Mittwald disclosed on 7 November 2026 that an attacker got into its platform through the MCP server it offers so customers can connect AI assistants to its…

HostingMCPAI

November 9, 2026 Read more →
Crédit Mutuel Arkéa
Incident High

Crédit Mutuel Arkéa confirms an attack that enabled fraudulent transfers, reportedly through a service provider

French banking group Crédit Mutuel Arkéa says an attack allowed fraudulent transactions before it suspended some flows and brought the incident under control. Customers’ assets ar…

Supply chainBanking

November 5, 2026 Read more →
WordPress — CVE-2026-119977
Vulnerability High

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

CISA added CVE-2026-119977, a race condition in WordPress core upgrades that lets an unauthenticated attacker run code on the server during the upgrade window, to its catalog of a…

WordPressPHPApache

November 4, 2026 Read more →
Synology DSM — Synology-SA-24:20
Vulnerability High

Synology: ransomware attacks hit NAS still running DSM versions left unpatched since 2024

Synology says attackers are exploiting a DSM vulnerability fixed in late 2024 to encrypt the data of NAS devices running outdated versions and demand a ransom. The vendor points t…

SynologyNASRansomware

November 3, 2026 Read more →
Polymarket
Incident High

Polymarket: a hijacked third-party monitoring script drained traders’ wallets, $3.9 million refunded

On 29 October 2026, a performance-monitoring script supplied by a service provider and loaded on polymarket.com was replaced with malicious code. It used the sessions of users who…

Supply chainJavaScriptWeb

November 3, 2026 Read more →
Binance
Incident Critical

Binance: $6.3 billion stolen from its hot wallets, a DevOps laptop as the first lead, and the FBI points to North Korea

Binance confirms that its hot wallets were compromised on 29 October, with losses of about $6.3 billion, and first traced the intrusion to a DevOps engineer’s laptop before findin…

CloudDevOps

November 2, 2026 Read more →
Northflank — 11:43 UTC
Incident High

Northflank security incident: customers told to treat every stored secret as stolen after AI keys are abused

Cloud platform Northflank disclosed a security incident on 30 October and told all customers to assume their environment variables were decrypted. Users have since reported unauth…

CloudDatabases

November 1, 2026 Read more →
ConnectWise · Microsoft 365 — 7 × Entra ID
Incident High

ConnectWise Cloud Backup: attackers hijacked the service’s Microsoft 365 identities, MSPs must audit every customer tenant

ConnectWise has confirmed unauthorised access to the application identities of its Cloud Backup service, formerly SkyKick, which connect to the Microsoft 365 tenants of managed se…

Microsoft 365Supply chainCloud

October 19, 2026 Read more →
Danfoss AK-SM · AK-SC — CERTFR-2026-ALE-012
Incident High

Hundreds of French supermarkets hit as attackers hijack Danfoss refrigeration controllers

During the night of 11 to 12 October 2026, attackers took control of Danfoss refrigeration supervisors in French supermarkets and forced fridges and freezers to heat up. CERT-FR i…

DanfossOT

October 13, 2026 Read more →
FBI · PeopleSoft — CVE-2026-35273
Incident Critical

FBI breach: attackers got in through a PeopleSoft patch a contractor never installed

The FBI says the theft of personal data on thousands of its staff happened because a contractor did not apply a security patch to a platform it managed. According to Reuters, that…

OraclePeopleSoft

October 6, 2026 Read more →
Citrix NetScaler — CVE-2026-88771 · 88772 · 88779
Vulnerability Critical

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Two pre-authentication flaws in NetScaler ADC and Gateway (CVE-2026-88771 and CVE-2026-88772, CVSS 9.5) were exploited before any fix existed and are now used by many attacker gro…

CitrixVPN

October 4, 2026 Read more →
Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 Rust-Salsa Important Exec Risk Fix 2026-056196047a

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…

Linux

43 days ago · Oct 1, 2026, 12:01 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 ruff Important Code Execution Risk Fix 2026-056196047a

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…

Linux

43 days ago · Oct 1, 2026, 12:01 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 python-uv-build Important Arbitrary Code Exec Fix 2026-056196047a

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…

Linux

43 days ago · Oct 1, 2026, 12:01 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 uv Important Code Exec Fix Advisory 2026-407b957a3b

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…

Linux

43 days ago · Oct 1, 2026, 3:13 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 rust-libcst_derive Security Advisory Fixes Execution Flaw

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…

Linux

43 days ago · Oct 1, 2026, 3:13 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 rust-salsa-macros Important Use-After-Free Fix 2026-056196047a

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…

Linux

43 days ago · Oct 1, 2026, 2:57 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 rust-libcst Important CodeExec Issue Fix 2026-056196047a

Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…

Linux

43 days ago · Oct 1, 2026, 2:57 AM Read more →
LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

How to Review Linux Security Boundaries: Three Kernel Examples

A Linux security review can find a check, a lock, or a safe-looking range and still miss the failure.

Linux

44 days ago · Sep 30, 2026, 1:35 AM Read more →
The Hacker News
The Hacker News Vulnerabilities

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real serv…

45 days ago · Sep 29, 2026, 8:08 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 perl-Dancer2 Major Deserialization Vulnerability 2026-3b893ccf2d

Dancer2::Serializer::YAML::deserialize handed request bodies straight to YAML::Load. A body tagged !!perl/hash:Some::Class therefore instantiated an arbitrary …

Linux

45 days ago · Sep 29, 2026, 3:06 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 45 perl-Dancer2 Critical Deserialization Exploit 2026-5e3eab9a07

Dancer2::Serializer::YAML::deserialize handed request bodies straight to YAML::Load. A body tagged !!perl/hash:Some::Class therefore instantiated an arbitrary …

Linux

45 days ago · Sep 29, 2026, 2:16 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories

Fedora 43 mongo-c-driver Critical Updates 2026-b4c749cdd2

libbson 1.30.11 Fixes Fix length check in bson_new_from_buffer. libmongoc 1.30.11 Fixes

Linux

47 days ago · Sep 27, 2026, 3:12 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Alerts

Fedora 44 mongo-c-driver Security Advisory 2026-4286ff2dfd

libbson 1.30.11 Fixes Fix length check in bson_new_from_buffer. libmongoc 1.30.11 Fixes

Linux

47 days ago · Sep 27, 2026, 2:58 AM Read more →
The Hacker News
The Hacker News Breaches & leaks

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-a…

48 days ago · Sep 26, 2026, 8:22 PM Read more →
LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

A Linux eBPF Trampoline Can Outlive the Program It Calls

A Linux eBPF security race can leave generated kernel code pointing at a BPF program after that program’s memory has been released.

Linux

49 days ago · Sep 25, 2026, 9:45 PM Read more →
The Hacker News
The Hacker News

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indi…

52 days ago · Sep 22, 2026, 11:38 AM Read more →
The Hacker News
The Hacker News Breaches & leaks

Identity Visibility in 2026: The Foundation of Identity Security

Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial acc…

55 days ago · Sep 19, 2026, 3:28 PM Read more →
The Hacker News
The Hacker News Vulnerabilities

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnera…

Linux

55 days ago · Sep 19, 2026, 8:24 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 python-django5 Significant Fix for Denial of Service and Forgery

Update python-django5 to the latest 5.x release (5.2.17) Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups Fixes CVE-…

Linux

56 days ago · Sep 18, 2026, 3:17 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 Django 5 Critical Request Forgery Denial-of-Service Alert

Update python-django5 to the latest 5.x release (5.2.17) Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups Fixes CVE-…

Linux

56 days ago · Sep 18, 2026, 3:02 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 45 python-django5 Critical Server-side Attack Fix CVE-2026-15307

Update python-django5 to the latest 5.x release (5.2.17) Fixes CVE-2026-15307 [high]: Server-side file-write and request forgery via spatial lookups Fixes CVE-…

Linux

56 days ago · Sep 18, 2026, 2:18 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 perl-DBI Critical Arbitrary Loading Symlink Updates Notice

1.653 Fix test for 32bit-perl Fix arbitrary module and file loading via dbm_type/dbm_mldbm (CVE-2026-78030) Tighten symlink outside of f_dir (CVE-2026-15392) c…

Linux

59 days ago · Sep 15, 2026, 3:03 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 perl-DBI Security Update CVE-2026-78030 CVE-2026-15392

1.653 Fix test for 32bit-perl Fix arbitrary module and file loading via dbm_type/dbm_mldbm (CVE-2026-78030) Tighten symlink outside of f_dir (CVE-2026-15392) c…

Linux

59 days ago · Sep 15, 2026, 2:41 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 45 perl-DBI Important Fixes for CVE-2026-78030 and CVE-2026-15392

1.653 Fix test for 32bit-perl Fix arbitrary module and file loading via dbm_type/dbm_mldbm (CVE-2026-78030) Tighten symlink outside of f_dir (CVE-2026-15392) c…

Linux

59 days ago · Sep 15, 2026, 2:18 AM Read more →
Back to Home