This week’s security newsletter was dominated by a Pentagon personnel data breach affecting more than three million people, ...

The Cybersecurity and Infrastructure Security Agency (CISA) has introduced a new framework aimed at improving the quality of Common Vulnerabilities and Exposures (CVE) data. This initiative is driven ...

The Apache Software Foundation released Apache HTTP Server 2.4.69 on October 1, 2026, addressing security flaws that could ...

iOS, iPadOS, and other operating systems affected, so patch now.

The vulnerability, an integer-underflow bug in the database's pre-authentication message parsing, affects TDengine versions 3 ...

A high-severity zero-day vulnerability affects the TDengine time-series database used across industrial, IoT, energy, and ...

Kiteworks zero-day alert: federal intelligence authorities warned the managed file transfer platform of an imminent attack, ...

Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of ...

WordPress CVE-2026-87902 is under attack and CISA set a 28 September fix date. Check the three conditions that decide if your ...

Roundcube CVE-2026-48842 is now under active attack. Patch exposed webmail and investigate database activity before declaring ...

ServiceNow issued security updates on September 24, 2026, for five vulnerabilities in its AI Platform, including an ...

Attackers are exploiting CVE-2026-48842 against unpatched Roundcube servers months after a fix was released, raising urgency ...