Alert

A major system failure has brought customer-facing banking services to a standstill at 128 shinkin banks across western Japan, leaving customers unable to withdraw cash, make deposits, or carry out online transactions. The incident started at about 1:30 PM on November 6, as reported by Shinkin Central Bank, which runs …

A flaw in Zyxel GS1900 switches was being used by hackers, and the update to fix it did not work. Researchers at Binarly found that a public exploit targeted a different bug than the one Zyxel fixed. Zyxel has now confirmed this as a new flaw, tracked as CVE-2026-107441. Zyxel …

Apple has sent new threat warnings to some iPhone users in 99 countries. They said these users may be targeted by advanced spyware attacks. Security expert Costin Raiu shared this news on October 30, 2026, noting it is different from the alerts in August and related to new attacks. “Today’s …

A new malware framework named NetamLoader is attacking a special version of Windows 10 used only by government agencies in Asia. The campaign seems like a supply-chain attack, and no one has connected it to a known hacking group so far. The malware hides inside a Windows update package, borrows …

A security expert shared information about a zero-click Android bug known as “SMS of Death.” Just one bad text message can make an Android phone stop working, drop ongoing calls, and in the worst scenario, leave the phone unable to make calls after every reboot. Google has marked the report …

Rapid7 researchers found 17 security flaws in Zimbra Collaboration Suite (ZCS) that mess up authentication, mailbox isolation, and host privileges. These issues let attackers take over user sessions through cross-site scripting, read any mailbox, and gain root access. Admins need to install the latest Zimbra patch updates right away and …

Apple launched iOS 27.2 and iPadOS 27.2 on October 26, 2026, fixing 163 security flaws. The update is for iPhone 11 and newer, along with many iPad models. The biggest issues are in WebKit, which powers Safari and most browsers in Apple apps. Apple warns that harmful web content might …

CISA has updated a new alert to reflect the addition of CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. 26, 2026. CISA urges organizations to quickly fix the recently found serious flaws in PHP, CVE-2026-109618 and CVE-2026-109619. These flaws, called “php2shell,” let remote code run in …

Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release on October 25, 2026 adds two rules for Brotli-encoded request bodies and the Next.js image optimization endpoint. These are turned on by default in Log mode so that it can …

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain systems. This affects systems that are not set up with default settings and there is no fix yet. According to a Friday advisory, this security flaw (tracked as CVE-2026-115560) can …