Cyber ​​Security Hub

Just days after being publicly disclosed, a critical security vulnerability in the GitLab platform has rapidly been targeted by attackers.

Apple has officially rolled out new security updates for Mac, iPhone, and iPad devices. This release addresses dozens of system vulnerabilities, most of which are tied to WebKit - the company's web browser engine.

A new security vulnerability in the macOS Screen Sharing feature is being actively exploited by malicious actors to gain control of devices and install cryptocurrency mining software.

Beginning with a vulnerability in an auxiliary tool, the supply chain attack targeting LiteLLM rapidly expanded, threatening numerous technology systems worldwide.

CVE-2026-10090 in Red Hat ACM scores 9.9 CVSS and may allow users with edit permissions to escalate to cluster-admin. Enterprises should review RBAC.

A critical chain of security vulnerabilities has recently been discovered in Zoom, allowing anyone in a meeting – whether a presenter or an attendee – to take control of other participants' computers.

Cybersecurity experts have recently detected a sharp surge in scanning activity targeting VMware vCenter systems. This serves as an early warning signal that threat actors are actively hunting for unpatched targets in preparation for dangerous intrusion attempts.

The discovery of RovoBlast - a severe security vulnerability in the Atlassian Rovo AI assistant serves as proof that an enterprise's internal data can be exfiltrated through a single malicious link.

A critical security vulnerability has recently left many Coldcard wallet users completely drained of their assets, with total losses surpassing $130 million in cryptocurrency.

Google recently confirmed that its AI implementation has achieved record-breaking patch delivery speeds, even discovering a critical vulnerability that had remained hidden for 13 years within the Chrome codebase.

A dangerous cyber attack campaign targeting Microsoft Outlook Web Access (OWA) systems has recently been discovered, directly threatening government agencies in the US and Europe.

Broadcom has officially released VMware Security Advisory (VMSA-2026-0006) to urgently address 5 vulnerabilities across several of its software product lines. Notably, up to 3 vulnerabilities are rated as "Critical".

CVE-2026-48294 in Adobe Acrobat Extension could expose WhatsApp Web data. Learn who is affected, how the attack works, and what businesses should do.

Check Point warns that CVE-2026-16232 is being actively exploited in the wild. The vulnerability allows attackers to bypass SmartConsole authentication and gain administrative access to affected systems.

CVE-2026-8933 in snap-confine allows a local user to escalate privileges to root. Canonical has released snapd patches for Ubuntu LTS.

Hackers exploited CVE-2026-0257 in Palo Alto PAN-OS to bypass GlobalProtect authentication and deploy Qilin ransomware across enterprise networks.

Zimbra has patched a Stored XSS flaw that allows malicious emails to execute code in user sessions. Organizations should update and investigate promptly.

WP2Shell combines two WordPress Core flaws that enable unauthenticated attacks. Businesses should patch, investigate compromise, and monitor websites.

Dell has patched CVE-2026-53483 and CVE-2026-53481 in PowerProtect Data Domain, two CVSS 9.8 flaws that may enable remote system compromise.

The Claude extension on the Chrome browser is becoming the center of attention in the tech community as security researchers have discovered a critical vulnerability that remains unpatched.