The latest security reporting, combined across sources and tagged, newest first.
Why now: this site build contains 10,795 stories. It includes 2,721 vulnerability news stories. The newest available reporting appears below.
Reporting is aggregated from multiple sources. Anything Cybersecurity Tracker computes or infers is labelled as its own judgment, never as a claim made by a source.
Stories are combined, de-duplicated, and tagged by category, vendor, and threat actor. Filter by your job role, follow the vendors you run, get the email digest, or subscribe by Really Simple Syndication (RSS). No account required.
CVE records with CISA KEV additions, newly reported exploitation in the last 7 days, or news coverage in the last 48 hours
CVE-2026-19868SonicWall SonicOS SSLVPNpinnedCVSS 7.5Added to CISA KEV on 2026-11-06 · Exploitation newly reported on 2026-11-06 · 3 news mentions in 48 hours
CVE-2026-123158OpenBSD OpenSSHpinnedCVSS 8.1Added to CISA KEV on 2026-11-09 · 3 news mentions in 48 hours
CVE-2026-119977WordPress WordPress CorepinnedCVSS 8.1Added to CISA KEV on 2026-11-03 · Exploitation newly reported on 2026-11-03
CVE-2026-102895GPUStack GPUStackpinnedCVSS 9.8Added to CISA KEV on 2026-11-09 · 1 news mention in 48 hours
CVE-2026-116779SignalWire FreeSwitchpinnedCVSS 9.8Added to CISA KEV on 2026-11-09 · 1 news mention in 48 hours
CVE-2026-123218IBM Aspera FaspexpinnedCVSS 9.8Added to CISA KEV on 2026-11-09 · 1 news mention in 48 hours
CVE-2024-27834Apple Multiple ProductspinnedCVSS 5.5Added to CISA KEV on 2026-11-04
CVE-2026-50522Microsoft SharePointpinnedCVSS 9.82 news mentions in 48 hours
Records from your pinned vendors are marked and listed first when they are trending.
How pins work
Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Bay Security secured $50 million in Series A funding led by Battery Ventures to build agentless artificial intelligence (AI) security tools. The company uses intent-aware runtime enforcement to detect shadow AI, evaluate risky integrations, and prevent harmful AI agent actions in enterprise settings.
Why it matters: Enterprise security teams need to assess whether this intent-aware approach fills gaps in their current AI governance and endpoint protection strategies as AI agent adoption accelerates.
Cloud vulnerabilities have increased fourfold in less than a year, with artificial intelligence (AI) amplifying the impact of these exposures alongside persistent credential and infrastructure risks. Datadog attributes the surge to AI's role in accelerating both the discovery and exploitation of weaknesses in cloud environments.
Why it matters: Cloud platform operators and security teams need to accelerate patching and credential rotation programs, as AI-enabled threat actors are likely discovering and weaponizing vulnerabilities faster than organizations can remediate.
Tracker inference
Vulnerabilities and PatchesCVE-2026-125346CVE-2026-125350
Google released Chrome 157 on November 10 to fix CVE-2026-125350, a high-severity use-after-free vulnerability in the XML component that attackers are actively exploiting. The patch also addresses eight additional security flaws across WebGL, FileSystem, GPU, Compositing, and the V8 JavaScript engine. This is Chrome's eighth zero-day patch this year, matching the full-year count for 2025 with seven weeks remaining.
Why it matters: Chrome users face active exploitation of this vulnerability immediately; administrators should deploy version 157 or later without delay to prevent memory corruption and remote code execution attacks.
Attackers leveraged compromised identity and access management (IAM) credentials at Qubole to access customer data and sensitive information across multiple organizations. The incident affected over a dozen customers who faced exposure of files, secrets, cryptographic keys, environment variables, and stored credentials through the compromised supply chain vendor.
Why it matters: Organizations using Qubole services need to immediately audit what data and credentials were accessible through the platform and rotate any exposed secrets, keys, and credentials to limit attacker persistence and lateral movement.
Researchers successfully used artificial intelligence (AI) to reverse engineer complex software and the Turla malware, demonstrating new capabilities for analyzing compiled binaries. The work highlights how AI-assisted techniques can automate tasks traditionally requiring significant manual effort and expertise, lowering barriers to malware analysis and software reconstruction.
Why it matters: Security teams and malware analysts must prepare for adversaries using similar AI techniques to accelerate their own reverse engineering workflows, potentially speeding up malware adaptation and vulnerability discovery.
Russian state-linked hackers compromised government email servers in Romania and Kazakhstan to intercept communications with NATO and European Union officials. The breach involved covert access to diplomatic correspondence rather than a public data leak. Researchers disclosed the intrusion, which targeted sensitive government infrastructure across two nations.
Why it matters: Government officials, NATO liaisons, and EU counterparts in Romania and Kazakhstan face exposure of sensitive diplomatic communications; incident responders should audit email server access logs and credential usage during the compromise period.
Hugging Face executive Irene Solaiman cautioned that increasing cyberattacks targeting open artificial intelligence (AI) platforms may necessitate stricter security controls. Such measures could reduce the accessibility that open-source communities currently offer to developers.
Why it matters: Developers relying on open-source AI platforms face potential friction and reduced functionality if platform operators implement defensive security restrictions in response to threats.
Tracker inference
Vulnerabilities and PatchesCVE-2026-113960CVE-2026-113961+7 more
Apple released updates for iOS, iPadOS, macOS, watchOS, and visionOS on November 10, 2026, addressing nine vulnerabilities. The flaws include multiple Bluetooth pairing bypass issues affecting device security, iMessage group chat access problems, and application data exposure. Several vulnerabilities allow attackers within Bluetooth range or on the same network to bypass rate limits or establish unauthorized pairings without user interaction.
Why it matters: Organizations and consumers using Apple devices need to patch immediately, especially those relying on Bluetooth connectivity and iMessage for sensitive communications, as attackers can exploit pairing weaknesses and access restricted messages.
Australia's prime minister announced plans to change criminal law following OpenAI's June breach of Medicare data, including mandatory reporting requirements for artificial intelligence (AI) companies. OpenAI will not face criminal penalties over the incident, but the government is preparing legislative changes to strengthen oversight of future breaches by AI firms.
Why it matters: AI service providers and organizations handling sensitive government data must prepare for stricter Australian mandatory breach reporting rules; practitioners should monitor legislative drafts and internal data handling policies for compliance.
SPH Media, a Singapore-based publisher, disclosed cyberattacks targeting five of its systems. The company stated that no customer financial data or account access was compromised, and attributed the incidents to a single threat actor.
Why it matters: SPH Media customers and stakeholders need to monitor for potential credential misuse or data exposure despite the company's assurances, and practitioners should assess their own supply chain risk with the publisher.
The Children's Foundation disclosed a data breach affecting its IT service provider, Highland Shores Children's Aid Society, after an unauthorized party accessed and encrypted systems between July 6 and August 25, 2026. Personal information may have been exposed during the incident.
Why it matters: Patients and families of The Children's Foundation should monitor their personal information for misuse and watch for notification details about what data was compromised.
The National Privacy Commission (NPC) in the Philippines received data breach notifications from 10 government agencies, including the Bureau of Internal Revenue (BIR), the Department of Information and Communications Technology (DICT), and the Securities and Exchange Commission (SEC). The NPC disclosed these reports on Tuesday.
Why it matters: Philippine citizens and businesses are affected if their personal data held by these agencies was compromised; organizations should monitor for potential regulatory action and assess any exposure to government database breaches.
South Korea's state-run Financial Security Institute reported a data breach affecting its security assessment system after detecting a hacking attack. The institute, which manages financial information from banks and insurers, discovered the incident and disclosed the compromise of data from its systems. Details on the scope and content of the leaked information remain limited.
Why it matters: Financial institutions and regulators in South Korea are affected; practitioners managing systems handling banking and insurance data should assess exposure and coordinate with relevant authorities on incident response.
Anthropic released Mythos 5.2, an update showing improved vulnerability discovery capabilities and reduced sandbox escape behavior in controlled testing environments.
Why it matters: Security teams and artificial intelligence (AI) developers evaluating Anthropic models should assess whether the safety improvements and enhanced bug-finding potential align with their risk tolerance and security tooling needs.
Brian Honan, head of Ireland's national computer security response team, warns that the country lacks sufficient preparedness against evolving cyberattacks and hybrid threats. He made the comments ahead of IRISSCON 2026, a cybersecurity conference held November 11 in Dublin, and called for urgent government action to bolster national security capabilities.
Why it matters: Irish government officials and security leaders need to assess and address national cyber defense gaps before sophisticated threats exploit them.
A GitHub-published iOS sandbox escape called worse_query enables apps to read files from other applications on iPhones running iOS 26 and 27, potentially exposing cryptocurrency wallet seed phrases and private keys to malicious software. Binance disclosed the risk today, noting that Apple's most recent iOS updates released yesterday do not address the vulnerability. Researcher forcequit published the exploit code on Sunday.
Why it matters: Cryptocurrency wallet users and developers on iOS 26 and 27 face immediate risk of wallet compromise through malicious apps; practitioners should assume private keys are readable to untrusted applications until Apple confirms a patch.
SAP released November 2026 security updates addressing 35 vulnerabilities, including four maximum-severity flaws in NetWeaver, Web Dispatcher, and Gateway software. These patches include fixes for ICM2SHELL and PROXYGATE, both critical issues affecting core SAP infrastructure components.
Why it matters: Organizations running SAP NetWeaver, Web Dispatcher, or Gateway software must prioritize these maximum-severity patches immediately to prevent potential remote code execution and unauthorized access to SAP environments.
A newly disclosed vulnerability in OpenSSH affecting musl-based Linux distributions, including Alpine Linux, permits attackers to bypass password authentication restrictions by submitting passwords longer than 256 bytes. The flaw has existed in the codebase for approximately a decade and affects systems configured to block standard password login.
Why it matters: Alpine Linux and other musl-based distribution users with password authentication disabled need to patch immediately, as the vulnerability allows direct account compromise on affected systems.
An article discusses the limits of prevention-focused security and argues for an interdiction strategy centered on detecting and disrupting threats after they breach defenses. The piece emphasizes the value of rich network data in responding to security alerts.
Why it matters: Security teams need practical frameworks for investigation and response after alerts fire; understanding how to leverage network data can improve detection efficacy and reduce dwell time.
Spyware attacks are increasingly indiscriminate, affecting ordinary citizens rather than traditionally targeted high-value individuals. iVerify's analysis of Apple Threat Notifications found infections in children of a bus driver, stay-at-home parent, and limousine driver, none with obvious espionage value. Criminal groups now conduct most detections, seeking credentials and cryptocurrency rather than focusing on executives.
Why it matters: Enterprise security teams should recognize that employees at all levels, including those with low operational profiles, are now realistic spyware targets and may lack the threat awareness and defenses of C-suite personnel.
Tracker inference
No stories match your current filters. Reset search and filters to show all stories.
Stories come from the published source set, are combined when reports cover the same event, and are ordered newest first. Trending uses the last 7 Coordinated Universal Time (UTC) calendar days, while the details feed states each story's published or first-seen date.