Latest Cybersecurity Threats

Cyber Security Hero Image with binary code

Security Threats Are Everywhere

Cybersecurity threats are constantly evolving, putting businesses of all sizes at risk of data breaches, ransomware attacks, and operational disruptions. For organizations in Buffalo, New York, and surrounding areas, staying informed about these threats is not just important—it’s essential. Protecting your data means protecting your business, your clients, and your reputation.

Below you’ll find links to the latest security alerts and vulnerabilities that could impact your business. From newly discovered software exploits to ongoing phishing scams, these insights can help you understand the risks and take proactive measures. In today’s digital age, no organization can afford to overlook cybersecurity. Make sure your defenses are robust and up to date to ensure your data—and your business—stay safe.

View Recent Security Threats

CVE-2026-87935 - Paid Downloads
Source: New source Published on: 2026-09-17
CVE-2026-87796 - Multi Uploader for Gravity Forms
Source: New source Published on: 2026-09-17
CVE-2026-25283 - Stack-based Buffer Overflow in OOBM
Source: New source Published on: 2026-09-17
CVE-2026-61599 - djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path
Source: New source Published on: 2026-09-16
CVE-2026-92593 - Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Execution
Source: New source Published on: 2026-09-16
CVE-2026-92592 - Craft CMS before 4.18.6 Remote Code Execution via signed cookie
Source: New source Published on: 2026-09-16
CVE-2026-92594 - Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQL
Source: New source Published on: 2026-09-16
CVE-2026-92596 - Nodemailer before 9.1.0 Denial of Service via addressparser
Source: New source Published on: 2026-09-16
CVE-2026-92597 - Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Comment
Source: New source Published on: 2026-09-16
CVE-2026-92598 - Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypass
Source: New source Published on: 2026-09-16
CVE-2026-92599 - Joi before 17.13.7 and 18.2.6 ReDoS via isoDate
Source: New source Published on: 2026-09-16
CVE-2026-92591 - Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installer
Source: New source Published on: 2026-09-16
CVE-2026-92578 - WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash
Source: New source Published on: 2026-09-16
CVE-2026-92580 - AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF
Source: New source Published on: 2026-09-16
CVE-2026-85469 - Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope
Source: New source Published on: 2026-09-16
Multiple Vulnerabilities in Cisco Secure Email Products Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-15
Multiple Vulnerabilities in Mikrotik Routers Could Allow for Admin Hijacking
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-14
A Vulnerability in GitLab Could Allow for Disclosure of Sensitive Data
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-14
Multiple Vulnerabilities in Ivanti Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-10
A Vulnerability in SAP Extended Passport (EPP) Processing Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-09
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-08
Critical Patches Issued for Microsoft Products, September 8, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-08
Multiple Vulnerabilities in DellSecure Connect Gateway Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-07
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-05
Multiple Vulnerabilities in SonicWall SMA1000 Series Appliances Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-02
Multiple Vulnerabilities in PaperCut Products Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-02
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-02
Multiple Vulnerabilities in Oracle Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-08-19
Multiple Vulnerabilities in SonicWall GMS Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-08-12
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-08-12
A Vulnerability in Zoom Clients Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-08-12
Critical Patches Issued for Microsoft Products, August 11, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-08-11
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-08-11
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-08-07
Multiple Vulnerabilities in SolarWinds Web Help Desk Could Allow for Authentication Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-08-03
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-07-30
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-07-28
A Vulnerability in VeloCloud Orchestrator (VCO) On-Prem Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-07-28
A Vulnerability Chain in WordPress Core Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-07-20
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-07-15

Older posts

Secure Your Business Today!

Contact LACyber today to schedule a consultation and take the first step towards building a more secure, resilient digital infrastructure for your business.