Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 01:28 IST · 13 sources · Get these by email

Network & security devices PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressOver 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Network & security devices Microsoft finally fixes VPN issues caused by September updatesMicrosoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. [...] BleepingComputer · Global · 30 Oct 2026
Network & security devices CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-97229 (CVSS score: 10.0) -… The Hacker News · Global · 30 Oct 2026
Network & security devices Anthropic-Themed Phishing Emails Bypass Top Security ToolsObvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products. Dark Reading · Global · 29 Oct 2026
Network & security devices ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesSome attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't. There's a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from… The Hacker News · Global · 29 Oct 2026
Network & security devices Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash FirewallsCisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-76418, is rated 8.6 on the CVSS… The Hacker News · Global · 29 Oct 2026
Network & security devices Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysHackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between sites and store them for later use, Cisco… The Hacker News · Global · 29 Oct 2026
Network & security devices Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management InterfacesPalo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet," the… The Hacker News · Global · 29 Oct 2026
Network & security devices Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WANTalos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthorized access to affected systems to deploy KeyDrift. Cisco Talos · Global · 28 Oct 2026
Network & security devices Compromised eMudhra intermediate certificatesCisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra. Cisco Talos · Global · 21 Oct 2026
Network & security devices Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackersAdversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than 25 legitimate platforms over the past year, exploiting the built-in trust of collaboration, file-sharing, payment and other services to reach their targets. Cisco Talos · Global · 21 Oct 2026
Network & security devices Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate ImplantWe investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware. The post Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant appeared first on Unit 42. Unit 42 · Global · 14 Oct 2026
Network & security devices Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited in the wild. The post Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30) appeared first on Unit 42. Unit 42 · Global · 30 Sep 2026
Network & security devices Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler GatewayThe NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited. UK NCSC · United Kingdom · 28 Sep 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.