Cybersecurity News — Top-Secured

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Fake IT support on Teams, then domain certificates: Microsoft details two intrusions through AD CS

Microsoft has investigated two intrusions that began with attackers posing as IT support on Teams and went on to abuse Active Directory Certificate Services. In one case, certific…

WindowsMicrosoft 365

Incident High

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

On 19 October 2026, a compromised OVHcloud developer account was used to replace the GitHub release files of ovhcloud-cli v0.11.0 to v0.15.0 with a trojanised build that steals SS…

OVHSupply chainCloud

Vulnerability High

Windows Shell: a zero-day that strips the internet warning from files, fixed in October’s Patch Tuesday

Among the more than 1,400 flaws fixed by Microsoft on 13 October, CVE-2026-96951 (CVSS 8.8) is already exploited: it lets a booby-trapped file escape the Mark of the Web protectio…

Windows

Threat High

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

On 8 October 2026 the FBI, CISA, NSA and agencies from six other countries published a joint advisory on the hackers enabled by Integrity Technology Group, a Chinese company linke…

ExchangeMicrosoft 365Linux

Vulnerability High

Microsoft Exchange: one stolen account is enough to read every mailbox — install the out-of-band fix

CVE-2026-96940 (CVSS 8.8) lets any authenticated user of an on-premises Exchange server read other people’s mail and attachments in the same organisation. Microsoft shipped an out…

ExchangeWindows

Advisory Medium

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Apache released httpd 2.4.69 on 1 October 2026 with 20 vulnerability fixes, rated low (15) or moderate (5). No emergency, but every Apache server should be updated in the next mai…

ApacheLinux

Citrix NetScaler — CVE-2026-88771 · 88772 · 88779

Vulnerability Critical

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Two pre-authentication flaws in NetScaler ADC and Gateway (CVE-2026-88771 and CVE-2026-88772, CVSS 9.5) were exploited before any fix existed and are now used by many attacker gro…

CitrixVPN

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

Latest Hacking News

Bug In Forcepoint VPN Client Could Trigger Privilege Escalation Attacks

A serious security bug has been discovered in Forcepoint VPN Client for Windows. According to researchers, the bug, upon anBug In Forcepoint VPN Client Could T…

Windows VPN

The Hacker News Vulnerabilities

Update Google Chrome Browser to Patch New Critical Security Flaws

Google has released an urgent software update for its Chrome web browser and is urging Windows, Mac, and Linux users to upgrade the application to the latest a…

Linux Windows Chrome

LinuxSecurity - Security Articles

China Eases Rules On Encryption

"BEIJING -- China has eased tough new restrictions on encryption technology, announcing that a vast category of consumer software and equipment -- including mo…

Windows

Back to Home