https://cybersecuretoday.com/article/themerex-deserialization-of-untrusted-data-vulnerability-in-deserialization-cve-2026-11952 CyberSecureToday en 2026-11-01T14:30:00.000Z ThemeREX Deserialization of Untrusted Data vulnerability in Deserialization Flaw Disclosed (CVE-2026-119526) https://cybersecuretoday.com/article/funnelkit-unauthenticated-php-object-injection-in-funnelkit-deserialization-cve-2026-39738 CyberSecureToday en 2026-11-01T14:30:00.000Z FunnelKit Unauthenticated PHP Object Injection in FunnelKit Deserialization Flaw Disclosed (CVE-2026-39738) https://cybersecuretoday.com/article/transliterator-unauthenticated-sql-injection-in-transliterator-sql-injection-cve-2026-3973 CyberSecureToday en 2026-11-01T14:30:00.000Z Transliterator Unauthenticated SQL Injection in Transliterator <= SQL Injection Flaw Disclosed (CVE-2026-39732) https://cybersecuretoday.com/article/the-pdf-invoice-for-woocommerce-drag-and-drop-te-deserialization-cve-2026-109220 CyberSecureToday en 2026-11-01T14:30:00.000Z The PDF Invoice for WooCommerce + Drag and Drop Te Deserialization Flaw Disclosed (CVE-2026-109220) https://cybersecuretoday.com/article/ibm-cloud-enterprise-portal-subsystems-sql-injection-ibm-sqli-2026 CyberSecureToday en 2026-11-01T14:30:00.000Z Critical SQL Injection on IBM Enterprise Cloud Web Infrastructure https://cybersecuretoday.com/article/jpom-security-vulnerability-cve-2026-120201 CyberSecureToday en 2026-11-01T14:30:00.000Z Jpom Vulnerability Disclosed (CVE-2026-120201) https://cybersecuretoday.com/article/the-wp-booking-system-booking-calendar-plugin-fo-input-validation-cve-2026-116557 CyberSecureToday en 2026-11-01T10:30:00.000Z The WP Booking System - Booking Calendar plugin fo Input Validation Flaw Disclosed (CVE-2026-116557) https://cybersecuretoday.com/article/the-popup-builder-create-highly-converting-mobi-missing-authorization-cve-2026-89270 CyberSecureToday en 2026-11-01T10:30:00.000Z The Popup Builder – Create highly converting, mobi Missing Authorization Flaw Disclosed (CVE-2026-89270) https://cybersecuretoday.com/article/the-project-manager-ai-powered-project-managemen-unrestricted-file-upload-cve-2026-116512 CyberSecureToday en 2026-11-01T10:30:00.000Z The Project Manager – AI Powered Project Managemen Unrestricted File Upload Flaw Disclosed (CVE-2026-116512) https://cybersecuretoday.com/article/the-uncanny-toolkit-for-learndash-plugin-for-wordp-authentication-bypass-cve-2026-119096 CyberSecureToday en 2026-11-01T10:30:00.000Z The Uncanny Toolkit for LearnDash plugin for WordP Authentication Bypass Flaw Disclosed (CVE-2026-119096) https://cybersecuretoday.com/article/aj-report-security-vulnerability-cve-2026-120209 CyberSecureToday en 2026-11-01T10:30:00.000Z AJ-Report Vulnerability Disclosed (CVE-2026-120209) https://cybersecuretoday.com/article/azure-enterprise-services-path-traversal-cve-2026-70009 CyberSecureToday en 2026-11-01T10:30:00.000Z Azure Enterprise Services Path Traversal Flaw Disclosed (CVE-2026-70009) https://cybersecuretoday.com/article/wavlink-security-vulnerability-has-been-detected-in-wavlin-input-validation-cve-2026-12019 CyberSecureToday en 2026-11-01T06:30:00.000Z WAVLINK Security vulnerability has been detected in WAVLIN Input Validation Flaw Disclosed (CVE-2026-120195) https://cybersecuretoday.com/article/rockwell-automation-cisa-allen-bradley-controllogix-compactlogix-plcs-information-disclosu CyberSecureToday en 2026-11-01T06:30:00.000Z CISA and Rockwell Automation Issue Urgent Directives to Sever Public Internet Exposure of Industrial PLCs https://cybersecuretoday.com/article/european-supervisory-authorities-eba-eiopa-esma-digital-operational-resilience-act-regulat CyberSecureToday en 2026-11-01T06:30:00.000Z EU DORA Enters Active Enforcement: European Supervisory Authorities Launch Audits and Register of Information Ingestion https://cybersecuretoday.com/article/u-s-securities-and-exchange-commission-sec-material-cybersecurity-incidents-item-informati CyberSecureToday en 2026-11-01T06:30:00.000Z SEC Form 8-K Analysis: Cloud Misconfiguration and Unencrypted Blob Storage Fuel Surge in Material Data Breaches https://cybersecuretoday.com/article/wavlink-vulnerability-has-been-found-in-wavlink-wl-wn530be-input-validation-cve-2026-12019 CyberSecureToday en 2026-11-01T06:30:00.000Z WAVLINK Vulnerability has been found in WAVLINK WL-WN530BE Input Validation Flaw Disclosed (CVE-2026-120198) https://cybersecuretoday.com/article/d-link-vulnerability-was-identified-in-d-link-dir-505-memory-corruption-cve-2026-120189 CyberSecureToday en 2026-11-01T06:30:00.000Z D-Link Vulnerability was identified in D-Link DIR-505 Memory Corruption Flaw Disclosed https://cybersecuretoday.com/article/unsupported-when-assigned-javanativemessaged-deserialization-cve-2026-118636 CyberSecureToday en 2026-11-01T02:30:00.000Z **UNSUPPORTED WHEN ASSIGNED**  JavaNativeMessageD Deserialization Flaw Disclosed https://cybersecuretoday.com/article/aws-enterprise-services-security-vulnerability-cve-2026-95699 CyberSecureToday en 2026-10-31T22:30:00.000Z AWS Enterprise Services Vulnerability Disclosed https://cybersecuretoday.com/article/cloudflare-q3-threat-report-network-ddos-attacks-surge-38-percent CyberSecureToday en 2026-10-31T21:30:00.000Z Cloudflare Q3 Threat Telemetry: Network-Layer DDoS Attacks Surge 38% to Record 18.2 Million Incidents https://cybersecuretoday.com/article/gitee-repository-scan-exposed-cloud-ai-api-credentials-audit CyberSecureToday en 2026-10-31T21:15:00.000Z Security Audit Uncovers 26,400 Live Cloud and Enterprise AI API Keys Exposed in Public Gitee Repositories https://cybersecuretoday.com/article/volt-typhoon-silent-train-mesh-cisco-sd-wan-zero-day-cve-2026-20127 CyberSecureToday en 2026-10-31T21:00:00.000Z Volt Typhoon Weaponizes 'Silent Train' Multi-Hop Relay Mesh to Infiltrate Cisco SD-WAN Control Planes https://cybersecuretoday.com/article/telegram-android-voice-call-memory-corruption-rce-device-takeover CyberSecureToday en 2026-10-31T20:30:00.000Z Critical Telegram for Android Voice Call Memory Corruption Flaw Enables Remote Device Takeover https://cybersecuretoday.com/article/drupal-commerce-core-critical-authorization-bypass-cve-2026-118539 CyberSecureToday en 2026-10-31T20:00:00.000Z Drupal Commerce Core Critical Authorization Bypass Flaw Under Active Exploitation (CVE-2026-118539) https://cybersecuretoday.com/article/wordpress-core-upgrade-window-staging-race-condition-rce-cve-2026-119977 CyberSecureToday en 2026-10-31T19:30:00.000Z WordPress Core Upgrade-Window Staging Race Condition RCE Draws 63,000 Attacks in 24 Hours (CVE-2026-119977) https://cybersecuretoday.com/article/teamviewer-reverse-screen-geometry-buffer-overflow-rce-cve-2026-111585 CyberSecureToday en 2026-10-31T19:00:00.000Z TeamViewer Vulnerability Inverts Remote Threat Model: Host Buffer Overflow Attacks Connecting Technicians (CVE-2026-111585) https://cybersecuretoday.com/article/linux-kernel-ipv4-tcp-use-after-free-rce-cve-2026-98432 CyberSecureToday en 2026-10-31T18:30:00.000Z Critical Linux Kernel IPv4 TCP Use-After-Free Flaw Enables Remote Root RCE (CVE-2026-98432) https://cybersecuretoday.com/article/the-acadlix-lms-ai-quiz-maker-online-exam-cou-path-traversal-cve-2026-103882 CyberSecureToday en 2026-10-31T18:30:00.000Z The Acadlix LMS – AI Quiz Maker, Online Exam & Cou Path Traversal Flaw Disclosed https://cybersecuretoday.com/article/rbi-assume-breach-framework-exposed-credentials-payment-infrastructure CyberSecureToday en 2026-10-31T18:15:00.000Z RBI Mandates 'Assume Breach' Standard for Exposed Credentials Across Digital Payment Infrastructure https://cybersecuretoday.com/article/cert-in-ciad-2026-0046-nbfc-fintech-disbursement-api-exploitation CyberSecureToday en 2026-10-31T17:00:00.000Z CERT-In Issues Critical Advisory CIAD-2026-0046: Threat Actors Weaponize NBFC and FinTech Disbursement APIs https://cybersecuretoday.com/article/chainalysis-internal-tools-compromise-agentic-ai-identity-leak CyberSecureToday en 2026-10-31T16:00:00.000Z Chainalysis Discloses Breach of Internal Customer Tooling via Offensive Agentic AI Techniques https://cybersecuretoday.com/article/trezor-safe-5-hardware-cellular-implant-supply-chain-tampering CyberSecureToday en 2026-10-31T14:30:00.000Z Supply Chain Alert: Hardware Cellular Implant Discovered Inside Tampered Trezor Safe 5 Wallets https://cybersecuretoday.com/article/the-simpleform-form-maker-to-chat-apps-with-quiz-unrestricted-file-upload-cve-2026-118235 CyberSecureToday en 2026-10-31T14:30:00.000Z The SimpleForm – Form Maker to Chat Apps with Quiz Unrestricted File Upload Flaw Disclosed https://cybersecuretoday.com/article/binance-6-billion-hot-wallet-breach-stablecoin-freeze CyberSecureToday en 2026-10-31T12:30:00.000Z Binance Suffers $6.4 Billion Multi-Chain Hot Wallet Theft; On-Chain Coalition Freezes $3 Billion in Stablecoins https://cybersecuretoday.com/article/vapor-panda-artex-multi-agent-ai-cyber-espionage-campaign CyberSecureToday en 2026-10-31T11:15:00.000Z Chinese Threat Group Vapor Panda Deploys ARTEX Multi-Agent AI Framework to Infiltrate Global Infrastructure https://cybersecuretoday.com/article/azure-enterprise-services-security-vulnerability-cve-2026-62874 CyberSecureToday en 2026-10-31T10:30:00.000Z Azure Enterprise Services Vulnerability Disclosed https://cybersecuretoday.com/article/claude-code-cursor-marketplace-trojanized-ssh-backdoor CyberSecureToday en 2026-10-31T10:00:00.000Z Trojanized Claude Code Extension on Cursor Marketplace Injects Reverse SSH Tunnel Backdoor https://cybersecuretoday.com/article/openai-chatgpt-shared-link-session-hijack-data-exfiltration CyberSecureToday en 2026-10-31T08:30:00.000Z OpenAI Patches Critical ChatGPT Shared-Link Flaw Permitting Session Hijacking and Private Chat Theft https://cybersecuretoday.com/article/in-server-mode-pgadmin-4-locks-an-internal-account-security-vulnerability-cve-2026-116238 CyberSecureToday en 2026-10-31T06:30:00.000Z In server mode pgAdmin 4 locks an internal account Vulnerability Disclosed https://cybersecuretoday.com/article/pgadmin-4-s-import-export-data-tool-wraps-a-user-s-os-command-injection-cve-2026-116241 CyberSecureToday en 2026-10-31T02:30:00.000Z PgAdmin 4's Import/Export Data tool wraps a user's OS Command Injection Flaw Disclosed https://cybersecuretoday.com/article/thales-stack-based-buffer-overflow-and-missing-authorizat-stack-buffer-overflow-cve-2026-7 CyberSecureToday en 2026-10-30T22:30:00.000Z Thales Stack-based buffer overflow and missing authorizat Stack Buffer Overflow Flaw Disclosed https://cybersecuretoday.com/article/ivanti-connect-secure-security-vulnerability-cve-2026-111357 CyberSecureToday en 2026-10-30T18:30:00.000Z Ivanti Connect Secure Vulnerability Exploited in Wild Attacks https://cybersecuretoday.com/article/ivanti-connect-secure-input-validation-cve-2026-118527 CyberSecureToday en 2026-10-30T18:30:00.000Z Ivanti Connect Secure Input Validation Flaw Exploited in Wild Attacks