Critical-severity advisories
60 alerts in this category.
CVEs and security advisories rated CRITICAL — exploitation is trivial or already observed in the wild and impact is severe. These are the alerts that get prioritized first in any sane vulnerability-management program.
SANS Internet Storm Center Advisory — Nov 3, 2026
SANS Internet Storm Center published an research on "SANS Internet Storm Center Advisory — Nov 3, 2026". Topic areas: sans, isc, incident, daily-summary. Published November 3, 2026. See the original s
Over 100 European Stores Hit as Supermarket Fridge Attacks Return
Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond. The post Over 100 European Stores Hit as Supermarket Fridge Attack
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
The Hacker News published an news on "Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw". Topic areas: zero-day, malware, ransomware, data-breach. Published November 3, 2
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
The Hacker News published an news on "Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors". Topic areas: zero-day, malware, ransomware, data-breach. Published November 3,
New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food
The Hacker News published an news on "New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food". Topic areas: zero-day, malware, ransomware, data-breach. Pub
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
The Hacker News published an news on "Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials". Topic areas: zero-day, malware, ransomware, data-breach. Published Nove
Critical Vulnerability: CVE-2026-13594
Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.
CVE-2026-13594Critical Vulnerability: CVE-2026-4052
This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System
CVE-2026-4052Critical Vulnerability: CVE-2026-120534
The Advanced Custom Fields: Extended PRO plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and including, 0.9.2.6 via the render_field function. This is due to insuff
CVE-2026-120534Critical Vulnerability: CVE-2026-120518
The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is due to bpxp_image_field_update_on_user_activation
CVE-2026-120518Critical Vulnerability: CVE-2026-79589
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure
CVE-2026-79589Critical Vulnerability: CVE-2026-107029
Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.
CVE-2026-107029CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Bulletin ID: 2026-163-AWS Publication Date: 11/02/2026 11:00 AM PST Description: aidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, t
AWSCVE-2026-120497CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Bulletin ID: 2026-164-AWS Publication Date: 11/02/2026 13:30 PM PST Description: We identified CVE-2026-116635. Under certain conditions, improper limitation of a pathname to a restricted directory in
AWSCVE-2026-116635The Record by Recorded Future Advisory — Nov 3, 2026
The Record by Recorded Future published an news on "The Record by Recorded Future Advisory — Nov 3, 2026". Topic areas: ransomware, apt, data-breach, malware. Published November 3, 2026. See the origi
The Record by Recorded Future Advisory — Nov 2, 2026
The Record by Recorded Future published an news on "The Record by Recorded Future Advisory — Nov 2, 2026". Topic areas: ransomware, apt, data-breach, malware. Published November 2, 2026. See the origi
SANS Internet Storm Center Advisory — Nov 2, 2026
Last week, an often-ignored TCP option, introduced in 2020, made the news due to a new vulnerability in Linux's implementation (RFC 8684, Â
AppleCVE-2026-98432Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. The post Ivanti Patches Two More Zero-Days Exploited in Connect Secur
IvantiCVE-2026-111357FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto. The post FBI Flags Over 600 Addresses Tied to North Korea’s Binance
Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint. The post Cybersecurity M&A Roundup: 37 Deals Announced in October 2026 appeare
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
The extension performed host reconnaissance and attempted to create a reverse SSH tunnel. The post Malicious Claude Code Extension Served in Cursor Supply Chain Attack appeared first on SecurityWeek.
Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
The top payout is for high-impact architectural research demonstrating full administrative control. The post Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward appeared first on SecurityWeek.
GooglePolymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted. The post Polymarket Returns $3.9 Million to Traders as DebugBear Cites
Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
The attackers used offensive agentic techniques to access the company’s systems and internal tools. The post Chainalysis Discloses Data Breach Following AI-Driven Cyberattack appeared first on Securit
Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website. The post Florida Student Aid Website Hack Puts Data of 4.9 Million
Revolve Data Breach Impacts at Least 180,000 People
Hackers accessed its online shopping platform and stole customers’ personal and payment card information. The post Revolve Data Breach Impacts at Least 180,000 People appeared first on SecurityWeek. ]
Artificial intelligence and cyber intrusion
An NCSC assessment that examines current AI-enabled threat trends and projections of the threat landscape to 2028.
IntelUnit 42 Threat Intelligence Highlights - Nov. 2, 2026
Unit 42 details recent threat intelligence, highlighting cyberespionage, financial extortion, and the rapid adoption of AI across offensive workflows. The post Unit 42 Threat Intelligence Highlights -
IntelLinux kernel RCE CVE-2026-98432
CVSSv3 Score: 9.8 CVE-2026-98432:ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without
LinuxCVE-2026-98432Rapid7 Blog Advisory — Nov 2, 2026
OverviewOn October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both. Ivanti rates CVE-2026-111357, a
IvantiCVE-2026-111357AI Vulnerability Finding
A comment: 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulne
Fintech platform Sageworks taken offline after suspected cyberattack
BleepingComputer published an news on "Fintech platform Sageworks taken offline after suspected cyberattack". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See t
Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
BleepingComputer published an news on "Over 1,000 GitLab servers vulnerable to ongoing RCE attacks". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See the origin
Ivanti patches two more Connect Secure zero-days chained in attacks
BleepingComputer published an news on "Ivanti patches two more Connect Secure zero-days chained in attacks". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See th
IvantiAttackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
The Hacker News published an news on "Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data". Topic areas: zero-day, malware, ransomware, data-breach. Published November 2
MicrosoftGovernment Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
The Hacker News published an news on "Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts". Topic areas: zero-day, malware, ransomware, data-breach. Published November 2
LinuxBTCPay Server warns of hot wallet crypto thefts on outdated instances
BleepingComputer published an news on "BTCPay Server warns of hot wallet crypto thefts on outdated instances". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See
Microsoft fixes Smart App Control broken by October Windows update
BleepingComputer published an news on "Microsoft fixes Smart App Control broken by October Windows update". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See the
MicrosoftYour Mobile Carrier Stores Your Call Logs for Years
BleepingComputer published an news on "Your Mobile Carrier Stores Your Call Logs for Years". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See the original sourc
Hackers disrupt refrigeration systems at European supermarkets
BleepingComputer published an news on "Hackers disrupt refrigeration systems at European supermarkets". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See the ori
Synology warns of C3RB3R ransomware attacks targeting NAS devices
BleepingComputer published an news on "Synology warns of C3RB3R ransomware attacks targeting NAS devices". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See the
Google disrupts million-device XCPE Android malware botnet, bans TV box maker
BleepingComputer published an news on "Google disrupts million-device XCPE Android malware botnet, bans TV box maker". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 20
GoogleChinese hackers use ARTEX AI in automated attacks against 200 orgs
BleepingComputer published an news on "Chinese hackers use ARTEX AI in automated attacks against 200 orgs". Topic areas: ransomware, malware, data-breach, zero-day. Published November 2, 2026. See the
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
The Hacker News published an news on "Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers". Topic areas: zero-day, malware, ransomware, data-breach. Published November 2, 2
AWS⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
The Hacker News published an news on "⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More". Topic areas: zero-day, malware, ransomware, data-breach. Publis
LinuxIs Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
The Hacker News published an news on "Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy". Topic areas: zero-day, malware, ransomware, data-breach. Published November 2, 2026. See the
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
The Hacker News published an news on "New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value". Topic areas: zero-day, malware, ransomware, data-breach. Published Nov
DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment
The Hacker News published an news on "DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment". Topic areas: zero-day, malware, ransomware, data-breach. Published Novemb
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
The Hacker News published an news on "Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access". Topic areas: zero-day, malware, ransomware, data-breach. Published Nov
Googleit-sa 2026 Recap: Key Trends Shaping Security Operations
From October 27 to 29, the ANY.RUN team joined it-sa 2026 in Nuremberg, meeting customers, partners, SOC and MSSP teams, and cybersecurity professionals from across Europe. Three days of conversations
IntelDSA-6602-1 linux - security update
https://security-tracker.debian.org/tracker/DSA-6602-1
LinuxCritical Vulnerability: CVE-2023-29073 — autodesk — autocad, autocad_advance_steel
A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a cras
autodeskCVE-2023-29073Critical Vulnerability: CVE-2023-29074 — autodesk — autocad, autocad_advance_steel
A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, r
autodeskCVE-2023-29074Critical Vulnerability: CVE-2026-86596
The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, <= 260927 via the 'item_name' parameter parameter. This is due to insufficient sanitizati
CVE-2026-86596Critical Vulnerability: CVE-2026-76407
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that
CVE-2026-76407Critical Vulnerability: CVE-2026-76528
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that
CVE-2026-76528Critical Vulnerability: CVE-2026-119716
pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments
CVE-2026-1197162nd November – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 2nd November, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Binance, a global cryptocurrency exchange, has suf
MicrosoftCVE-2026-111497Critical Vulnerability: CVE-2026-102435
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the _getObjAttr function in all versions up to, and includ
CVE-2026-102435Critical Vulnerability: CVE-2026-107057
An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.
CVE-2026-107057
Get alerts that match YOUR environment
This page shows everything in the category. Vulnios narrows it down to alerts that affect your actual asset inventory — only the CVEs you need to act on.
Start a free scan