FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’
Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.
Home / News
Cyber security news
Stay up to date with the latest cyber security news and threats from around the world.
Today
Microsoft Struggles to Restore Email and Other Services in a Global Outage
Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify and repair affected infrastructure.”
Apify Confirms Customer Data Accessed in Cyberattack
The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data.
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks
Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets.
Citrix Patches 10 Critical NetScaler Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools
Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches.
PHP2Shell Exploited in Destructive Check Point Gateway Attacks
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Yesterday
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Chrome, Firefox Updates Patch Over 180 Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Daylight Lands $80 Million for AI-Powered Security Operations
The company plans to accelerate product development, hire new talent, expand its US presence, and enter new markets.
Hackers Deploy Malware in Fresh ScreenConnect Campaign
The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication.
Hackers Target N-central Zero-Days as N-able Rushes Patches
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Critical Red Hat Quay Vulnerability Could Expose Private Container Images
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
November 11, 2026
Asus, Zoom Release Security Patches
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Finite State Raises $27 Million to Secure Software and Firmware in Connected Devices
The Series C round will fund international expansion and more autonomous features for the firm’s device security platform.
Bay Raises $50 Million to Control What Enterprise AI Agents Can Do
Founded by three ex-IDF Unit 8200 intelligence officers, Bay is launched to provide a control plane for AI agents.
Dreeze Emerges From Stealth With $33M to Rebuild Cloud Apps After Cyberattacks
Created by Zerto and Kashya veterans, the startup has launched a platform designed to recover whole cloud applications.
ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy.
Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD
Intel and AMD disclose more than 200 vulnerabilities, including critical flaws in Intel TDX software and numerous AMD graphics bugs.
Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms
Apple has patched Bluetooth and AirPlay pairing flaws, iMessage vulnerabilities, and an exploited Brotli bug across its platforms.
November 10, 2026
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation.
Adobe Patches 110 Vulnerabilities Across 9 Products
Adobe has fixed vulnerabilities in AEM, Premiere, Photoshop, After Effects, Connect, Audition, Dimension, Content Credentials SDK, and Media Encoder.
Software Transparency Is Changing: Allan Friedman on SBOM, AI BOMs and What Comes Next
SBOM pioneer Allan Friedman joined the SecurityWeek Podcast to discuss why knowing what is inside software is only the beginning, how AI is complicating software supply chain visibility,...