CybersecurityNews.ca

Latest
Threats & Vulnerabilities

OpenBSD Issues Urgent Advisory Targeting OpenSSH Vulnerabilities

Threats & Vulnerabilities

PHP2Shell: Active Exploitation Reports

Patch now

Flaws under attack or rated critical in the last 30 days.

All threats

Latest critical CVEs

  1. 10.0 CVE-2026-97229 (cve.org, opens in a new tab) Exploited

    GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

    Exploited, added Oct 28 · Our story

  2. 9.8 CVE-2026-111497 (cve.org, opens in a new tab) Exploited

    Google Brotli Unchecked Return Value Vulnerability

    Exploited, added Oct 26 · Our story

  3. 9.3 CVE-2026-48356 (cve.org, opens in a new tab) Exploited

    Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

    Exploited, added Oct 26

  4. 9.8 CVE-2026-124079 (cve.org, opens in a new tab)

    rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability that allows…

    Published Nov 9

  5. 9.9 CVE-2026-124585 (cve.org, opens in a new tab)

    A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775.

    Published Nov 9

All critical CVEs Data: NVD (not endorsed by the NVD)

Top stories

The week in Canadian cybersecurity

One email every Friday: the breaches, patches and policy changes that matter, in five minutes. See a recent issue

Practical guides
Threats & Vulnerabilities
Analysis Threats & Vulnerabilities

Lessons from the PHP Zero-Day Outage

Threats & Vulnerabilities

Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

Threats & Vulnerabilities

PHP shares mitigation for new RCE vulnerability with no patch

More in this topic
Featured

Coming up

All events

Security jobs

Hiring security people in Canada?

Post your job ad for free. Our readers are the security teams, analysts and IT leads you want to reach.

Post a job