Latest Cybersecurity Threats

Cyber Security Hero Image with binary code

Security Threats Are Everywhere

Cybersecurity threats are constantly evolving, putting businesses of all sizes at risk of data breaches, ransomware attacks, and operational disruptions. For organizations in Buffalo, New York, and surrounding areas, staying informed about these threats is not just important—it’s essential. Protecting your data means protecting your business, your clients, and your reputation.

Below you’ll find links to the latest security alerts and vulnerabilities that could impact your business. From newly discovered software exploits to ongoing phishing scams, these insights can help you understand the risks and take proactive measures. In today’s digital age, no organization can afford to overlook cybersecurity. Make sure your defenses are robust and up to date to ensure your data—and your business—stay safe.

View Recent Security Threats

CVE-2026-110879 - jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512)
Source: New source Published on: 2026-10-28
CVE-2026-58256 - GRR vulnerable to Remote Code Execution Via PHP Code Injection
Source: New source Published on: 2026-10-27
CVE-2026-58255 - Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401
Source: New source Published on: 2026-10-27
CVE-2026-58205 - GRR has a Reflected XSS issue
Source: New source Published on: 2026-10-27
CVE-2026-57191 - Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
Source: New source Published on: 2026-10-27
CVE-2026-85898 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Source: New source Published on: 2026-10-27
CVE-2026-83831 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Source: New source Published on: 2026-10-27
CVE-2026-116692 - MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules
Source: New source Published on: 2026-10-27
CVE-2026-116693 - dd-trace: ReDOS in URL query string obfuscation
Source: New source Published on: 2026-10-27
CVE-2026-116688 - CKEditor: Cross-site scripting (XSS) in the engine package
Source: New source Published on: 2026-10-27
CVE-2026-112355 - MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API
Source: New source Published on: 2026-10-27
CVE-2026-112350 - Sunhillo SureLine Path Traversal via radarUpdater.cgi
Source: New source Published on: 2026-10-27
CVE-2026-112351 - Sunhillo SureLine OS Command Injection via networkDiag.cgi
Source: New source Published on: 2026-10-27
CVE-2026-112352 - Sunhillo SureLine Authentication Bypass via Session Cookie
Source: New source Published on: 2026-10-27
CVE-2026-57202 - Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
Source: New source Published on: 2026-10-27
Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-27
A Vulnerability in Brotli Library Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-27
Multiple Vulnerabilities in PHP Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-21
A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-20
A Vulnerability in BeyondTrust Remote Support Could Allow for Arbitrary Upload of Files
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-20
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-14
A Vulnerability in Ivanti Connect Secure Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-13
Critical Patches Issued for Microsoft Products, October 13, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-13
A Vulnerability in Atlassian Data Center Products Could Allow for Arbitrary File Access
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-12
Multiple Vulnerabilities in SonicWall SMA1000 Series Appliances Could Allow for Remote Code Execution.
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-12
Multiple Vulnerabilities in Dell System Update Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-12
A Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-09
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-07
A Vulnerability in Fortinet FortiMail Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-02
A Vulnerability in Kiteworks EPG (Email Security Gateway) Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-01
A Vulnerability in WordPress Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-10-01
A Vulnerability in Cisco Catalyst SD-WAN Manager Could Allow for Authentication Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-30
A Vulnerability in Apple Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-30
Multiple Vulnerabilities in NetScaler ADC and NetScaler Gateway Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-28
Multiple Vulnerabilities in ServiceNow's AI Platform Could Allow for Unauthorized Access
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-25
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-24
Multiple Vulnerabilities in IBM Concert Software Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-24
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-23
A Vulnerability in F5 BIG-IP Access Policy Manager Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-23
Multiple Vulnerabilities in Oracle Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-09-17

Older posts

Secure Your Business Today!

Contact LACyber today to schedule a consultation and take the first step towards building a more secure, resilient digital infrastructure for your business.