Google releases Chrome 157 with 213 fixes, seven rated critical
Medium · SecurityWeek ·
Google's Chrome 157 update resolves over 200 issues, including seven critical-severity flaws tied to memory safety and authorization weaknesses.
Cyber News Archive
Every notable cyber threat for education and government (126 items), including CVE references.
AI-assisted summaries and fixes, sources cited.
Talos Tracks VOLTA Operators Using LLMs to Rank Windows Data Theft Targets
Medium · Security Affairs ·
Cisco Talos reports VOLTA operators using VOLTA and VOLTA-AUTODOXER on Windows to collect personal data, assess victim value, and prioritize targets with LLM assistance.
Attackers Exploit Zero-Day in Zyxel Switches for OS Command Execution
High · SecurityWeek ·
A high-severity Zyxel switch flaw, CVE-2026-107441, is being exploited in the wild to run operating-system commands through specially formed HTTP requests.
Subnet Solutions PowerSYSTEM Center Flaws Let Low-Privilege Users Run SQL
Medium · CISA Advisories ·
Two 2026 vulnerabilities in Subnet Solutions PowerSYSTEM Center can let an authenticated low-privilege account run unauthorized SQL and reach restricted resources.
Unknown Actors Hit Synology, SAP, Flowise and Trezor in Multi-Vendor Campaign
High · SecurityWeek ·
A multi-vendor wave of attacks has prompted warnings across NAS, SAP, LLM and hardware-wallet products, with ransomware, breaches and seven-figure costs reported.
D-Link warns of multiple zero-days in DGS-3130 Series switches
High · BleepingComputer ·
D-Link is alerting customers to several unpatched zero-day vulnerabilities affecting DGS-3130, managed Gigabit, and stackable switches, and has published mitigation guidance while no CVEs are listed.
Queens Public Library ransomware attack disrupts Wi-Fi and computers at 66 branches
High · The Record ·
A ransomware incident on Wednesday knocked out Wi-Fi and public computers across Queens Public Library's 66 branches, prompting alerts to residents.
Ransomware Outage Hits Queens Public Library Wi-Fi, Checkout and Website
High · The Register — Security ·
On November 5, 2026, an unclaimed ransomware incident knocked out Queens Public Library’s website, wireless access and checkout services across New York City.
Zyxel GS1900 Switches Face Active Zero-Day Exploitation, Firmware Fix Released
High · The Hacker News ·
Binarly reports attackers are actively exploiting an unauthenticated root command flaw in Zyxel GS1900 switch web management, prompting a new firmware release.
Zyxel GS1900 Switch Zero-Day Exploited Against Nearly 1,000 Devices
High · BleepingComputer ·
Unidentified attackers exploited an unknown Zyxel GS1900 flaw to compromise close to 1,000 switches globally and steal credentials and configuration files.
Ransomware Operators Encrypt Files on Unpatched Synology NAS Systems
High · Security Affairs ·
During 2024, ransomware crews have been encrypting data on Synology storage systems whose DiskStation Manager software was not current, and administrators are being told to update now.
Frontline Education breach exposes data of about 1.3 million school staff and students
High · SecurityWeek ·
Attackers used a software weakness at Frontline Education to take personal records belonging to roughly 1.3 million school employees and students, prompting urgent review.
Synology NAS Campaign Targets Unpatched DSM With Encryption, Ransom Demands
High · The Hacker News ·
Attackers in December 2024 targeted Synology NAS systems running outdated DiskStation Manager, using a fixed vulnerability to encrypt data and demand ransom.
Harvard alumni fundraising systems breached, exposing about 851,000 accounts
High · BleepingComputer ·
Unidentified intruders accessed Harvard's alumni-relations and fundraising platforms in November 2025 and took data tied to roughly 851,000 accounts, including about 850,000 distinct email addresses.
Microsoft Fixes Windows Paint Flaw CVE-2026-83844 Tied to RCE Risk
High · The Hacker News ·
Microsoft has released a Store-delivered patch for CVE-2026-83844, a Windows Paint vulnerability that can enable remote code execution, with Windows Update not included in the rollout.
Barracuda Email Security Gateway Flaw CVE-2026-116606 Allows Unauthenticated Root Access
High · The Hacker News ·
watchTowr detailed a chained exploit for CVE-2026-116606 in Barracuda Email Security Gateway that lets an unauthenticated attacker bypass authorization and gain root-level command execution; patches are available.
Barracuda patches two chainable ESG flaws enabling root access
High · Security Affairs ·
Unauthenticated attackers could combine two Barracuda ESG vulnerabilities to bypass authentication, change device configuration, and obtain root; patches are available.
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
High · The Hacker News ·
Two flaws in SonicWall Global Management System, including CVE-2026-109593, allow unauthenticated network attackers to read internal files and change database records on versions up to 9.5.2.
Google fixes Android 14–17 FrameDecoder.cpp bug enabling remote code execution
High · Security Affairs ·
Google has fixed CVE-2026-58868, a heap-based memory overflow in Android's FrameDecoder.cpp that lets outside attackers execute code on versions 14 through 17 without user action.
Google Patches High-Severity Android Flaw Allowing Silent Remote Code Execution
High · The Hacker News ·
Google’s November 2026 Android advisory addresses CVE-2026-58868, a high-severity flaw that lets attackers run code remotely without any victim action on versions 14 through 17.
Barracuda appliances exposed to CVE-2026-116606 auth bypass and root takeover
High · The Hacker News ·
A newly disclosed Barracuda flaw lets attackers skip authorization checks, inject commands, and reach root on vulnerable appliances — and it can be chained with other weaknesses.
Node-RED Flaw CVE-2026-58115 Enables Auth Bypass and Backdoor Deployment
High · Help Net Security ·
VulnCheck has flagged a Node-RED authentication bypass, tracked as CVE-2026-58115, that attackers are using to plant backdoors and spread a Linux bot.
Max-severity Siemens IoT2050 flaw exploited to implant remote backdoors
Critical · The Hacker News ·
Unknown attackers are exploiting a maximum-severity authentication bypass in Siemens SIMATIC IoT2050 Advanced devices, enabling code execution and persistent remote access.
Iris Ohyama: Intruders Hit External Cloud, Exposing 7.7M Records
High · BleepingComputer ·
Unidentified intruders reached an outside cloud environment linked to Iris Plaza, and Iris Ohyama says personal information for about 7.7 million individuals was exposed.