612/69 Friday, November 6, 2026 Cisco has released an update to address CVE-2026-76506 in UCS Central Software, rated 7.6 on the CVSS scale. The vulnerability is caused by insufficient validation of data in HTTP requests. An attacker with a valid account on the system could send specially crafted requests that may lead to command execution […]
611/69 Friday, November 6, 2026 University of New Mexico Health System (UNM Health), a major healthcare provider in the U.S. state of New Mexico, disclosed a cybersecurity incident on October 26, 2026, that disrupted multiple medical services. The organization was forced to divert ambulances to other hospitals, temporarily suspend new patient admissions, cancel appointments at […]
610/69 Friday, November 6, 2026 Cybersecurity company Binarly has disclosed that attacks affecting nearly 1,000 Zyxel GS1900 series switches were actually carried out using a newly disclosed zero-day vulnerability. Initial investigations had incorrectly attributed the activity to an older vulnerability for which patches were already available. As a result, network administrators who had applied the […]
609/69 Thursday, November 5, 2026 France’s national blood service, Établissement français du sang (EFS), disclosed a cyberattack on November 2, 2026, that affected temperature-control systems at three blood-product storage facilities. Attackers altered temperature and defrost settings to abnormal levels, creating a risk that stored plasma and biological samples could be damaged. EFS stated that it […]
608/69 Thursday, November 5, 2026 Google has released its November 2026 security update to address CVE-2026-58868, a Critical vulnerability affecting Android versions 14, 15, 16, 16 QPR2, and 17. The flaw resides in the Android Framework component and could potentially allow an attacker to achieve Remote Code Execution (RCE) without requiring additional privileges or any […]
607/69 Thursday, November 5, 2026 SonicWall has issued an advisory covering two vulnerabilities in its Global Management System (GMS), a centralized platform used by IT administrators to deploy, configure, and manage large numbers of SonicWall security appliances. The flaws affect SonicWall GMS version 9.5.2 and earlier and were discovered and reported by cybersecurity researchers from […]
606/69 Thursday, November 5, 2026 Barracuda has released patches for two vulnerabilities affecting its Email Security Gateway (ESG) and related products. If chained together, the two flaws could allow an attacker to bypass authentication and ultimately gain root-level control of an affected appliance. Successful exploitation could give an attacker extensive access to the underlying security […]
605/69 Wednesday, November 4, 2026 Binance has disclosed preliminary findings from its investigation into a cyberattack that occurred on October 29, 2026, affecting approximately USD 6.34 billion in digital assets. The attackers used multiple techniques, including fake job interviews, malicious software downloads, credential theft, compromise of employee devices, and abuse of internal AI tools as […]
604/69 Wednesday, November 4, 2026 Researchers from Defused Cyber detected attempts to exploit CVE-2026-81648 in the CryptoPayment Gateway plugin for WordPress. The vulnerability is classified as Missing Authorization and has a CVSS v3.1 score of 10.0, rated Critical. It affects versions 1.2.1 through 1.2.2 and could allow unauthenticated attackers to invoke administrative functions, delete files […]
603/69 Wednesday, November 4, 2026 Bitdefender has disclosed a cyberattack against the IT network of a school organization in the United Kingdom, where attackers associated with the 3AM ransomware group gained access to nearly 50 computers through an unmanaged host and successfully encrypted approximately 37 systems. The malicious activity was observed between September 10 and […]
