Vulnerability
-
Getty Images
European authorities probe ongoing attacks targeting grocery refrigerators
U.S. military investigators have been working with French agencies after hacks hit domestic bases.
By David Jones , Eric Geller • Updated Nov. 3, 2026 -
andreswd via Getty Images
Sponsored by ServiceNowProtecting OT, IoT and medical devices without disrupting operations
A smarter OT security strategy starts with visibility, context and prioritization.
Nov. 2, 2026 -
Explore the Trendlineâž”
Getty Images
TrendlineVulnerability Management
The rapid advancement Ai has changed the debate over secure software in the entrprise.
By Cybersecurity Dive staff -
Alamy
Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell
The AI-enabled campaign hit two dozen targets, including sites linked to the U.S. government.
By David Jones • Oct. 30, 2026 -
Getty Images
Hackers could poison AI models by tampering with core infrastructure
AI systems rely on a complex web of hardware. Compromising any one component could let adversaries change model weights.
By Eric Geller • Oct. 29, 2026 -
Getty Images
Insurance industry fears potential impacts from PHP2Shell
A systemic cyber event could lead to billions of dollars in claims that exceed current risk models.
By David Jones • Updated Oct. 29, 2026 -
Getty Images
Hackers seize on vulnerable IoT devices to spy, pivot and route traffic
Known vulnerabilities with available patches are by far the biggest risk facing connected devices, a new report found.
By Eric Geller • Oct. 28, 2026 -
Getty Images
CISA, security researchers confirm successful exploitation of PHP flaws
The security community has come under increased scrutiny as earlier threat warnings were slow to materialize.
By David Jones • Oct. 27, 2026 -
Getty Images
PHP exploitation moves at slower-than-expected pace, but millions remain at risk
Security researchers flag botnet activity, but successful compromises have yet to break through.
By David Jones • Updated Oct. 26, 2026 -
Getty Images
Weak encryption certificates could have let hackers easily spoof websites
Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized.
By Eric Geller • Oct. 21, 2026 -
Getty Images
Critical PHP vulnerabilities expose most websites to potential compromise
Government agencies urged organizations to take their sites offline until they could be fixed.
By Eric Geller • Updated Oct. 21, 2026 -
Matt Kapko/Cybersecurity Dive
Ransomware groups expand targeting of Palo Alto Networks vulnerability
Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal.
By David Jones • Oct. 20, 2026 -
Permission granted by HPE
Sponsored by HPEHybrid mesh firewalls: Distributed security enforcement for a self-driving network
Can traditional firewalls keep up with today's distributed enterprise? Discover how hybrid mesh firewalls close security gaps without slowing networks.
Oct. 19, 2026 -
Getty Images
China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign
Researchers say the hacker is harvesting credentials and stealing sensitive information.
By David Jones • Updated Oct. 16, 2026 -
Getty Images
Open-source security rests on understanding risks, scaling fixes
Developers should coordinate security work to make the most of their interconnected ecosystem, IBM said in a new report.
By Eric Geller • Oct. 16, 2026 -
Alamy
Thousands of refrigerator devices remain exposed following French cyberattack
The investigation points to a much wider risk for industrial systems across the globe.
By David Jones • Updated Oct. 15, 2026 -
Getty Images
Internet exposure of AI tools, ICS devices continues to grow
Vulnerability disclosures and hacking campaigns haven’t made much of a dent in the amount of important infrastructure left online, a new report found.
By Eric Geller • Oct. 15, 2026 -
Devrimb
Hacker targets Ivanti Connect Secure in chained exploitation
Researchers warn the attacker is taking multiple steps to clean up forensic evidence after an attack.
By David Jones • Oct. 14, 2026 -
AdrianHancu via Getty Images
Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
Hundreds of French supermarkets faced a sophisticated cyberattack, allowing hackers to manipulate industrial controls.
By David Jones • Updated Oct. 13, 2026 -
Citrix via Flickr
CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
A newly discovered critical vulnerability is adding to the workload of customers mitigating other recent flaws.
By David Jones • Updated Oct. 12, 2026 -
Getty Images
GitLab fixes critical vulnerability that exposed software environments to sabotage
The company urged customers to upgrade to the latest versions of its flagship products.
By Eric Geller • Oct. 12, 2026 -
Sean Gallup / Staff via Getty Images
IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
The tech giant’s announcement underscores the insufficiency of companies’ existing software supply chain security practices.
By Eric Geller • Oct. 6, 2026 -
Citrix via Flickr
Citrix issues patch for third exploited flaw in NetScaler
The memory overflow vulnerability could lead to a denial-of-service condition under certain circumstances.
By David Jones • Updated Oct. 5, 2026 -
Courtesy of Fortinet
Fortinet warns that critical flaw in FortiMail is facing exploitation
Security researchers said that attackers can gain access to credentials, stored mail and other connected systems.
By David Jones • Oct. 2, 2026 -
Justin Sullivan via Getty Images
Mass exploitation of Citrix NetScaler: What we currently know
Suspected state-linked actors targeted critical vulnerabilities in the widely used platform, causing widespread disruption across Europe and North America.
By David Jones • Sept. 30, 2026 -
Justin Sullivan/Getty Images via Getty Images
Citrix NetScaler exploitation began days before public notification
Customers need to check systems for compromise prior to patching, because the security upgrade may not fully resolve an infected system.
By David Jones • Updated Sept. 29, 2026
