Collabora Flaw Exploited to Backdoor Nextcloud Servers
Attackers exploit a critical Collabora flaw to plant web shells on Nextcloud servers. Administrators must update or remove the app; disabling it is not enough.
Read more →Latest cybersecurity news, vulnerabilities, and threat intelligence
Attackers exploit a critical Collabora flaw to plant web shells on Nextcloud servers. Administrators must update or remove the app; disabling it is not enough.
Read more →
Palo Alto Networks fixes an exploited PAN-OS flaw that allows authenticated attackers to run code as root, urging updates and restricted management access.
Read more →
Microsoft patches CVE-2026-96951, an exploited Windows Shell flaw that bypasses Mark of the Web protections when users open malicious files sent by attackers.
Read more →
A cyberattack disrupted refrigeration at French supermarkets. CERT-FR confirms Danfoss controller compromises and urges access restrictions and system recovery.
Read more →
Researchers detect attempts to exploit SonicWall SMA1000 flaw CVE-2026-102255. Hotfixes are available, while successful compromise has not yet been confirmed.
Read more →
The FBI disrupted Flax Typhoon hacking tools linked to critical infrastructure targeting and university breaches, as officials released new defender guidance.
Read more →
FortiBleed attackers reuse stolen credentials, lock administrators out of Fortinet devices and supply ransomware access, prompting renewed calls for action.
Read more →
Atlassian urges patches for CVE-2026-21589 across eight self-hosted products, including Jira and Confluence, to prevent unauthenticated access to known files.
Read more →
Denmark is investigating a CPR data breach affecting 8.8 million people after unauthorized users abused a private company’s legitimate access to the registry.
Read more →
Citrix confirms attacks exploiting NetScaler SAML flaw CVE-2026-88779. Customers who installed September patches must upgrade again to prevent service outages.
Read more →