Cybersecurity News — Top-Secured

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

BeyondTrust has fixed CVE-2026-102764, a critical flaw in Remote Support that lets an attacker with no account perform file operations on the appliance. According to Google and Ma…

BeyondTrustRemote accessLinux

Vulnerability Critical

Ivanti Connect Secure: zero-day chain exploited for root access, one of three flaws still unpatched

Attackers chained three unknown flaws in Ivanti Connect Secure VPN appliances to run commands as root without logging in, then harvested Active Directory credentials. Ivanti fixed…

IvantiVPNActive Directory

Vulnerability High

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Atlassian disclosed on 5 October 2026 CVE-2026-21589 (CVSS 9.3), a path traversal flaw in eight self-hosted products, including Jira, Confluence and Bitbucket Data Center. No logi…

AtlassianJiraConfluence

Vulnerability High

Microsoft Exchange: one stolen account is enough to read every mailbox — install the out-of-band fix

CVE-2026-96940 (CVSS 8.8) lets any authenticated user of an on-premises Exchange server read other people’s mail and attachments in the same organisation. Microsoft shipped an out…

ExchangeWindows

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

The Hacker News Vulnerabilities

Yikes! iOS 13 Coming Next Week With iPhone LockScreen Bypass Bug

Good news... next week, on September 19, Apple will roll out iOS 13, the latest version of its mobile operating system.Yes, we're excited about, but here comes…

Apple

The Hacker News Breaches & leaks

New SIM Card Flaw Lets Hackers Hijack Any Phone Just By Sending SMS

Cybersecurity researchers today revealed the existence of a new and previously undetected critical vulnerability in SIM cards that could allow remote attackers…

The Hacker News Vulnerabilities

Warning ' Two New Unpatched Critical RCE Flaws Affect All Windows Versions

Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers…

Windows

Back to Home