Cybersecurity

Analysis, perspectives, and current intelligence on cybersecurity, emerging threats, risk, and the technologies shaping modern security.

Exclusive IPHWY ThreatFeed

A custom-maintained, machine-readable feed of IP addresses associated with malicious activity, combining curated blacklist intelligence with additional indicators validated through AbuseIPDB.

View Live ThreatFeed →

Latest CISA Alerts

Critical Vulnerabilities in PHP Require Immediate Patching

by CISA on October 21, 2026 at 12:00 pm

CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as “php2shell,” allow for unauthenticated remote code execution in PHP and affect all PHP installations serving web requests. Organizations should immediately update to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 to fix […]

CISA Adds Six Known Exploited Vulnerabilities to Catalog

by CISA on October 20, 2026 at 12:00 pm

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF) […]

CISA Adds Two Known Exploited Vulnerabilities to Catalog

by CISA on October 16, 2026 at 12:00 pm

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose […]

CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support

by CISA on October 16, 2026 at 12:00 pm

CISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade first. Cyber threat actors are actively exploiting the vulnerability to gain initial access, then establishing persistence, […]

CISA Adds One Known Exploited Vulnerability to Catalog

by CISA on October 15, 2026 at 12:00 pm

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding […]

CISA Adds Four Known Exploited Vulnerabilities to Catalog

by CISA on October 14, 2026 at 12:00 pm

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability CVE-2026-105134 Ahsay AhsayCBS Command […]

—–> View All CISA Alerts <—–

Latest CVEs

CVE-2026-98916

Published: Oct 23, 2026 · UTC

Not yet scored

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color change When trying to do a color change, validate that the link is beaconing first, to avoid calling the driver…

CVE-2026-98915

Published: Oct 23, 2026 · UTC

Not yet scored

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device on driver removal The driver uses vb2_fop_release() as its file release operation, so vb2_video_unregister_device() should be used instead of video_unregister_device() during driver removal. This…

CVE-2026-98914

Published: Oct 23, 2026 · UTC

Not yet scored

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with execute_depth and return -ELOOP when exceeded.

CVE-2026-98913

Published: Oct 23, 2026 · UTC

Not yet scored

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf_probe() cavium_ptp_get() acquires a reference to the PTP PCI device through pci_get_device(). If any initialization step fails after cavium_ptp_get(), the…

CVE-2026-98912

Published: Oct 23, 2026 · UTC

Not yet scored

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_oss_read() checks whether the next queued OSS sequencer event fits in the remaining userspace buffer before removing…

CVE-2026-98911

Published: Oct 23, 2026 · UTC

Not yet scored

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect…

Source: NIST National Vulnerability Database. Latest published records available from NVD; severity may be pending. Retrieved Oct 23, 2026, 12:35 UTC.