The $6.36B Binance heist and TraderTraitor, the DebugBear script that drained Polymarket traders, GitLab CVE-2026-97229 at Alpine Linux, Cisco ASA/FTD CVE-2026-76418, TeamViewer CVE-2026-111585 and Drupal Commerce CVE-2026-118539.
Read story ↗Exploitation de Cisco ASA/FTD, SD-WAN KeyDrift, Silent Train, VMware dans CISA KEV, Alpine GitLab, So-net et iRhythm : huit points de presse vérifiés.
Read story ↗Tailscale fixed four SSH and Serve vulnerabilities, TS-2026-014 to TS-2026-017, in v1.104.4 after a researcher's "Tailworm" disclosure. What each flaw does, who is exposed, the forwarding mitigation and how to harden Tailscale SSH policies.
Read story ↗CVE-2026-101767 (CVSS 9.8) lets unauthenticated attackers reach Oracle E-Business Suite's database as APPS through the AppsTCFServer servlet and chain to OS commands. Exploitation attempts began October 22, 2026. Affected versions, the October CPU fix, indicators and hardening steps.
Read story ↗CVE-2026-111497 is an out-of-bounds write in the Brotli decoder bundled with Node.js 22, 24 and 26. CISA added it to KEV on October 27, 2026. Here are the fixed versions, how attacks reach the decoder, how to check your runtimes and how to reduce exposure.
Read story ↗Flip through the magazine Turn the pages below, or open full-screen mode for the best reading experience. Related coverage on MAG212 CYBER
Read story ↗We use Microsoft Clarity analytics cookies to see how readers use our articles and improve the site. No advertising, never on our tools pages. politique de confidentialité