Latest Cybersecurity Threats

Cyber Security Hero Image with binary code

Security Threats Are Everywhere

Cybersecurity threats are constantly evolving, putting businesses of all sizes at risk of data breaches, ransomware attacks, and operational disruptions. For organizations in Buffalo, New York, and surrounding areas, staying informed about these threats is not just important—it’s essential. Protecting your data means protecting your business, your clients, and your reputation.

Below you’ll find links to the latest security alerts and vulnerabilities that could impact your business. From newly discovered software exploits to ongoing phishing scams, these insights can help you understand the risks and take proactive measures. In today’s digital age, no organization can afford to overlook cybersecurity. Make sure your defenses are robust and up to date to ensure your data—and your business—stay safe.

View Recent Security Threats

CVE-2026-29522 - ZwickRoell Test Data Management < 3.0.8 Path Traversal LFI
Source: New source Published on: 2026-03-16
CVE-2026-32267 - Craft CMS Vulnerable to Privilege Escalation/Bypass through UsersController- >actionImpersonateWithToken()
Source: New source Published on: 2026-03-16
CVE-2026-32263 - Craft CMS vulnerable to behavior injection RCE via EntryTypesController
Source: New source Published on: 2026-03-16
CVE-2026-32264 - Craft CMS vulnerable to behavior injection RCE ElementIndexesController and FieldsController
Source: New source Published on: 2026-03-16
CVE-2026-30875 - Chamilo LMS: Authenticated RCE via H5P Import
Source: New source Published on: 2026-03-16
CVE-2026-30881 - Chamilo LMS: SQL Injection in the statistics AJAX endpoint
Source: New source Published on: 2026-03-16
CVE-2026-28430 - Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php
Source: New source Published on: 2026-03-16
CVE-2026-32261 - RCE via SSTI for users with permissions to access the Craft CMS Webhooks plugin
Source: New source Published on: 2026-03-16
CVE-2025-69808 - Bareiron P2R3 Out-of-Bounds Memory Access Denial of Service
Source: New source Published on: 2026-03-16
CVE-2025-69809 - Bareiron P2R3 Memory Corruption Vulnerability
Source: New source Published on: 2026-03-16
CVE-2026-4254 - Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow
Source: New source Published on: 2026-03-16
CVE-2026-27962 - Authlib JWS JWK Header Injection: Signature Verification Bypass
Source: New source Published on: 2026-03-16
CVE-2026-28490 - Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle
Source: New source Published on: 2026-03-16
CVE-2026-28498 - Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding
Source: New source Published on: 2026-03-16
CVE-2026-23489 - Fields GLPI plugin vulnerable to RCE in dropdown generation
Source: New source Published on: 2026-03-16
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-03-13
Multiple Vulnerabilities in Mozilla Firefox Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-03-10
Critical Patches Issued for Microsoft Products, March 10, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-03-10
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-03-10
A Vulnerability in pac4j-jwt (JwtAuthenticator) Could Allow for Authentication Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-03-05
Multiple Vulnerabilities in Cisco Products Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-03-05
Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-03-04
Multiple Vulnerabilities in Cisco Catalyst SD-WAN Products Could Allow for Authentication Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-02-26
A Vulnerability in Dell RecoverPoint for Virtual Machines Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-02-18
A Vulnerability in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-02-18
Multiple Vulnerabilities in Ivanti Endpoint Manager Could Allow for Authentication Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-02-10
Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-02-10
Critical Patches Issued for Microsoft Products, February 10, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-02-10
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-02-10
Multiple Vulnerabilities in Ivanti Endpoint Manager Mobile Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-01-30
Multiple Vulnerabilities in SolarWinds Web Help Desk Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-01-28
A Vulnerability in Microsoft Office Could Allow for Security Feature Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-01-27
A Vulnerability in Cisco Unified Communications Products Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-01-21
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-01-14
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-01-14
Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-01-13
Critical Patches Issued for Microsoft Products, January 13, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-01-13
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-01-13
A Vulnerability in WatchGuard Fireware OS Could Allow for Arbitrary Code Execution.
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2025-12-23
A Vulnerability in Cisco AsyncOS Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2025-12-18

Older posts

Secure Your Business Today!

Contact LACyber today to schedule a consultation and take the first step towards building a more secure, resilient digital infrastructure for your business.