Cybersecurity News — Top-Secured

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

ConnectWise · Microsoft 365 — 7 × Entra ID

ConnectWise Cloud Backup: attackers hijacked the service’s Microsoft 365 identities, MSPs must audit every customer tenant

ConnectWise has confirmed unauthorised access to the application identities of its Cloud Backup service, formerly SkyKick, which connect to the Microsoft 365 tenants of managed se…

Microsoft 365Supply chainCloud

Vulnerability Critical

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

BeyondTrust has fixed CVE-2026-102764, a critical flaw in Remote Support that lets an attacker with no account perform file operations on the appliance. According to Google and Ma…

BeyondTrustRemote accessLinux

Vulnerability High

Palo Alto PAN-OS: a management interface flaw gives root on firewalls, already exploited

Palo Alto Networks has fixed CVE-2026-0322, a flaw in the PAN-OS management interface that lets an authenticated administrator run code as root on PA-Series and VM-Series firewall…

Palo Alto NetworksFirewallPalo Alto

Nextcloud · Collabora CODE — CVE-2026-110447

Vulnerability Critical

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

A critical flaw in the optional Nextcloud app Collabora Online - Built-in CODE Server lets anyone run system commands on the server without logging in. It has been exploited since…

NextcloudLinuxPHP

Cisco Secure Email Gateway — CVE-2026-76519

Vulnerability Critical

Cisco Secure Email Gateway: a single booby-trapped email gives attackers root, flaw already exploited

Cisco has fixed CVE-2026-76519, a critical flaw in its Secure Email Gateway that lets anyone send an email with a crafted attachment to write files and run commands as root on the…

CiscoEmail security

Threat High

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

On 8 October 2026 the FBI, CISA, NSA and agencies from six other countries published a joint advisory on the hackers enabled by Integrity Technology Group, a Chinese company linke…

ExchangeMicrosoft 365Linux

Threat High

FortiBleed: the FBI warns attackers are still logging into exposed FortiGate firewalls with stolen passwords

The FBI and the US Secret Service warn that FortiBleed, a campaign that steals and cracks passwords for Fortinet FortiGate firewalls and SSL VPN gateways, is still active. Citing …

FortinetVPN

Vulnerability High

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Atlassian disclosed on 5 October 2026 CVE-2026-21589 (CVSS 9.3), a path traversal flaw in eight self-hosted products, including Jira, Confluence and Bitbucket Data Center. No logi…

AtlassianJiraConfluence

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

The Hacker News Breaches & leaks

Breaches are now commonplace, but Reason Cybersecurity lets users guard their privacy

There has been no shortage of massive security breaches so far this year. Just last July, Capital One disclosed that it was hit by a breach that affected more …

Latest Hacking News Vulnerabilities

Critical Privilege Escalation Vulnerability Existed In Harbor Registry

Researchers have discovered a security vulnerability in Harbor cloud native registry. As revealed, a critical bug existed in Harbor containerCritical Privilege…

LinuxSecurity - Security Articles

IBM Closes its $34 Billion Acquisition of Red Hat: A Monumental Moment for Open Sour

In the tech giant's largest deal ever and one of the biggest deals in US history, IBM closed its $34 billion acquisition of Red Hat on Tuesday July 9, 2019. Re…

Linux

LinuxSecurity - Security Articles

Press Release: Guardian Digital Leverages the Power of Open Source to Combat Evolving Email Security Threa

Cloud-based email security solution utilizes the open source methodology for securing business email, recognized by many as the best approach to the problem of…

LinuxSecurity - Security Articles

Press Release: Guardian Digital Leverages the Power of Open Source to Combat Evolving Email Security Threats

Cloud-based email security solution utilizes the open source methodology for securing business email, recognized by many as the best approach to the problem of…

Back to Home