⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article reports that CISA has added three vulnerabilities to its Known Exploited Vulnerabilities catalog due to active exploitation. The flaws include a critical code injection in Langflow (CVE-2026-9198), an encryption bypass in Apache Tomcat (CVE-2026-34486), and an authentication bypass in N-able N-central.
This article describes a supply chain attack where a trojanized version of the QuickFox VPN installer delivered the FDMTP backdoor, linked to Mustang Panda. The attack targeted Windows users and remained active from August 2025 until a fix was released in version 3.59.6.
This article describes a supply chain attack where a trojanized version of the QuickFox VPN installer delivered the FDMTP backdoor, linked to Mustang Panda. The attack targeted Windows users and remained active from August 2025 until a fix was released in version 3.59.6.
Multiple vulnerabilities were identified in Apache Tomcat that could allow a remote attacker to bypass security restrictions, disclose sensitive information, and manipulate data. CVE-2026-34486 is being actively exploited in the wild.
This article warns of multiple vulnerabilities in TP-Link Omada products that could be exploited to compromise network management systems. TP-Link has released firmware updates, and the analyst recommends immediate patching and network access restrictions.
A vulnerability in Mozilla Firefox for Android allows address bar spoofing, potentially leading to phishing attacks. Mozilla has released version 153.0.3 to fix the issue.