Security Feed

1. Executive summary Google's November 2026 Android security bulletin fixes CVE-2026-58868, a critical remote code execution flaw that affects Android

1. Executive summary CISA added CVE-2026-119977, a time-of-check time-of-use race condition in WordPress Core, to the Known Exploited

1. Executive summary Sekoia's Threat Detection & Research team reports a watering hole campaign active in mid-October 2026 that compromised or

1. Executive summary On 2026-11-04 the leak-site operator "BYOD" posted a claim to have breached IHG Hotels & Resorts

1. Executive summary On 2026-11-03 the leak-site indexing service Ransomware.live recorded an entry in which the operator "incransom"

1. Executive summary The Aoqin ransomware group listed SILIKO d.o.o., a Slovenian manufacturer of elastomer and thermoplastic components, on its leak site

1. Executive summary CISA added CVE-2026-119977, a time-of-check time-of-use race condition in WordPress Core, to the Known Exploited

1. Executive summary The fix for CVE-2026-44575, a middleware and proxy bypass in Next.js App Router applications, does not apply to

1. Executive summary CERT-FR published advisory CERTFR-2026-AVI-1443 on 3 November 2026 covering multiple vulnerabilities in Google Android, stating that some

1. Executive summary VulnCheck canary infrastructure recorded exploitation of CVE-2026-58115 on 30 October 2026, when a single request to the Node-RED

1. Executive summary Huntress has published an episode of its declassified series that connects two money flows: a network of more than 250 near-

1. Executive summary Dark Reading reports that an affiliate of the 3AM ransomware operation breached a European school and that evidence suggests a language