https://cybersecuretoday.com/article/fintech-nbfc-api-security-hardening-guide-bola-zero-trust CyberSecureToday en 2026-10-22T19:45:00.000Z Banking & NBFC API Security Advisory: Hardening FinTech Endpoints Against BOLA and Data Leaks https://cybersecuretoday.com/article/rbi-it-governance-nbfc-scale-based-cybersecurity-compliance-playbook CyberSecureToday en 2026-10-22T19:30:00.000Z RBI IT Governance & Cybersecurity Master Direction for NBFCs: Implementation Playbook https://cybersecuretoday.com/article/litellm-supply-chain-backdoor-token-exposure CyberSecureToday en 2026-10-22T19:10:00.000Z LiteLLM Pipeline Hijacked in Software Supply Chain Attack Deploying InfoStealer and RAT https://cybersecuretoday.com/article/meta-25-billion-privacy-penalty-cambridge-analytica CyberSecureToday en 2026-10-22T19:05:00.000Z Meta Ordered to Pay $25 Billion After New Mexico Court Finds Consumer Privacy Deceptions https://cybersecuretoday.com/article/opencode-mcp-oauth-remote-code-execution CyberSecureToday en 2026-10-22T19:00:00.000Z OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection https://cybersecuretoday.com/article/sentry-nextjs-security-vulnerability-cve-2026-114139 CyberSecureToday en 2026-10-22T18:30:00.000Z @sentry/nextjs Vulnerability Disclosed https://cybersecuretoday.com/article/pillow-out-of-bounds-read-cve-2026-96639 CyberSecureToday en 2026-10-22T18:30:00.000Z Pillow Out-of-Bounds Read Flaw Disclosed https://cybersecuretoday.com/article/mem0-sql-injection-cve-2026-115324 CyberSecureToday en 2026-10-22T14:30:00.000Z Mem0 SQL Injection Flaw Disclosed https://cybersecuretoday.com/article/php-improper-control-of-filename-for-include-require-s-security-vulnerability-cve-2026-112 CyberSecureToday en 2026-10-22T14:30:00.000Z PHP Improper Control of Filename for Include/Require S Vulnerability Disclosed https://cybersecuretoday.com/article/openremote-missing-authorization-cve-2026-114661 CyberSecureToday en 2026-10-22T06:30:00.000Z OpenRemote Missing Authorization Flaw Disclosed https://cybersecuretoday.com/article/totolink-flaw-has-been-found-in-totolink-a950rg-security-vulnerability-cve-2026-114575 CyberSecureToday en 2026-10-22T06:30:00.000Z TOTOLINK Flaw has been found in TOTOLINK A950RG Vulnerability Disclosed https://cybersecuretoday.com/article/gitlab-onigmo-regex-integer-overflow-rce-cve-2026-110264 CyberSecureToday en 2026-10-22T04:45:00.000Z GitLab Patches Maximum-Severity CVSS 10.0 Unauthenticated RCE Flaw Spanning 12 Years of Releases https://cybersecuretoday.com/article/php2shell-core-runtime-memory-corruption-rce-cve-2026-109618-cve-2026-109619 CyberSecureToday en 2026-10-22T04:45:00.000Z Critical 'PHP2Shell' Core Runtime Flaws Trigger Unauthenticated RCE Across Millions of Web Servers https://cybersecuretoday.com/article/totolink-weakness-has-been-identified-in-totolink-ex200-memory-corruption-cve-2026-114383 CyberSecureToday en 2026-10-22T02:30:00.000Z TOTOLINK Weakness has been identified in TOTOLINK EX200 Memory Corruption Flaw Disclosed https://cybersecuretoday.com/article/vulnerability-in-the-oracle-java-se-oracle-graalv-missing-authentication-cve-2026-91403 CyberSecureToday en 2026-10-22T02:30:00.000Z Vulnerability in the Oracle Java SE, Oracle GraalV Missing Authentication Flaw Disclosed https://cybersecuretoday.com/article/apache-traffic-server-s-experimental-tsmemcache-pl-missing-authentication-cve-2026-111811 CyberSecureToday en 2026-10-21T22:30:00.000Z Apache Traffic Server's experimental tsmemcache pl Missing Authentication Flaw Disclosed https://cybersecuretoday.com/article/apache-traffic-server-forwarded-a-malformed-302-re-security-vulnerability-cve-2026-111816 CyberSecureToday en 2026-10-21T22:30:00.000Z Apache Traffic Server forwarded a malformed 302 re Vulnerability Disclosed https://cybersecuretoday.com/article/storybook-code-injection-cve-2026-114125 CyberSecureToday en 2026-10-21T18:30:00.000Z Storybook Code Injection Flaw Disclosed https://cybersecuretoday.com/article/kitae-unrestricted-upload-of-file-with-dangerous-type-vu-unrestricted-file-upload-cve-2026 CyberSecureToday en 2026-10-21T18:30:00.000Z Kitae Unrestricted Upload of File with Dangerous Type vu Unrestricted File Upload Flaw Disclosed https://cybersecuretoday.com/article/sensitive-information-disclosure-and-manipulation-authorization-bypass-cve-2026-87095 CyberSecureToday en 2026-10-21T14:30:00.000Z Sensitive information disclosure and manipulation Authorization Bypass Flaw Disclosed https://cybersecuretoday.com/article/hkuds-vibe-trading-from-missing-authentication-cve-2026-114108 CyberSecureToday en 2026-10-21T14:30:00.000Z HKUDS Vibe-Trading from Missing Authentication Flaw Disclosed https://cybersecuretoday.com/article/in-openstack-manila-authorization-bypass-cve-2026-71195 CyberSecureToday en 2026-10-21T10:30:00.000Z In OpenStack Manila Authorization Bypass Flaw Disclosed https://cybersecuretoday.com/article/best-practice-software-bp-premier-hard-coded-credentials-cve-2026-114119 CyberSecureToday en 2026-10-21T10:30:00.000Z Best Practice Software Bp Premier Hard-Coded Credentials Flaw Disclosed https://cybersecuretoday.com/article/siemens-software-center-security-vulnerability-cve-2026-110936 CyberSecureToday en 2026-10-21T06:30:00.000Z Siemens Software Center Vulnerability Exploited in Wild Attacks https://cybersecuretoday.com/article/tenda-security-vulnerability-has-been-detected-in-tenda-memory-corruption-cve-2026-113744 CyberSecureToday en 2026-10-21T06:30:00.000Z Tenda Security vulnerability has been detected in Tenda Memory Corruption Flaw Disclosed https://cybersecuretoday.com/article/singapore-csa-frontier-ai-agentic-security-guidelines CyberSecureToday en 2026-10-21T02:50:00.000Z Singapore CSA Releases National Cybersecurity Framework for Enterprise Frontier AI and Agentic Deployments https://cybersecuretoday.com/article/singcert-carbonato-botnet-docker-remote-api-cloud-exploit CyberSecureToday en 2026-10-21T02:45:00.000Z SingCERT Issues Critical Alert as CARBONATO Botnet Exploits Exposed Docker Remote APIs Across Cloud Workloads https://cybersecuretoday.com/article/singapore-csa-quantum-safe-migration-roadmap-cii-sicw CyberSecureToday en 2026-10-21T02:40:00.000Z Singapore CSA Mandates Quantum-Safe Cryptographic Migration Roadmap for Critical Information Infrastructure https://cybersecuretoday.com/article/singapore-pdpc-turnover-penalties-marina-bay-sands-saas-breach CyberSecureToday en 2026-10-21T02:35:00.000Z Singapore PDPC Enforces Enhanced 10% Turnover Penalty Regime Following Marina Bay Sands and SaaS Data Breaches https://cybersecuretoday.com/article/operation-cyber-guardian-unc3886-singapore-telecom-espionage CyberSecureToday en 2026-10-21T02:30:00.000Z Operation Cyber Guardian: CSA and IMDA Expose UNC3886 Stealth Espionage Campaign Targeting Singapore Telcos https://cybersecuretoday.com/article/plex-media-server-server-side-request-forgery-cve-2026-96655 CyberSecureToday en 2026-10-21T02:30:00.000Z Plex Media Server Server-Side Request Forgery Flaw Exploited in Wild Attacks https://cybersecuretoday.com/article/plex-media-server-input-validation-cve-2026-96654 CyberSecureToday en 2026-10-21T02:30:00.000Z Plex Media Server Input Validation Flaw Exploited in Wild Attacks https://cybersecuretoday.com/article/eg-secure-solutions-siteguard-server-edition-os-command-injection-cve-2026-106931 CyberSecureToday en 2026-10-20T22:30:00.000Z EG Secure Solutions SiteGuard Server Edition OS Command Injection Flaw Exploited in Wild Attacks https://cybersecuretoday.com/article/plex-media-server-security-vulnerability-cve-2026-96656 CyberSecureToday en 2026-10-20T22:30:00.000Z Plex Media Server Vulnerability Exploited in Wild Attacks