Latest Cybersecurity Threats

Cyber Security Hero Image with binary code

Security Threats Are Everywhere

Cybersecurity threats are constantly evolving, putting businesses of all sizes at risk of data breaches, ransomware attacks, and operational disruptions. For organizations in Buffalo, New York, and surrounding areas, staying informed about these threats is not just important—it’s essential. Protecting your data means protecting your business, your clients, and your reputation.

Below you’ll find links to the latest security alerts and vulnerabilities that could impact your business. From newly discovered software exploits to ongoing phishing scams, these insights can help you understand the risks and take proactive measures. In today’s digital age, no organization can afford to overlook cybersecurity. Make sure your defenses are robust and up to date to ensure your data—and your business—stay safe.

View Recent Security Threats

CVE-2026-32833 - Cudy LT300 3.0 OS Command Injection via NTP Configuration
Source: New source Published on: 2026-06-26
CVE-2026-33646 - mise: Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
Source: New source Published on: 2026-06-26
CVE-2026-55441 - mise: Arbitrary command execution via task-include files in an untrusted, config-less repository
Source: New source Published on: 2026-06-26
CVE-2026-56876 - extract-zip unvalidated symlink path traversal
Source: New source Published on: 2026-06-26
CVE-2026-54636 - Dokku: OS Command Injection via app.json managed Cron
Source: New source Published on: 2026-06-26
CVE-2026-45405 - Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add
Source: New source Published on: 2026-06-26
CVE-2026-45406 - Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval
Source: New source Published on: 2026-06-26
CVE-2026-45408 - Dokku: OS Command Injection via App Name in Git Pre-Receive Hook
Source: New source Published on: 2026-06-26
CVE-2026-56663 - AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access
Source: New source Published on: 2026-06-26
CVE-2026-57518 - Pagekit CMS 1.0.18 Privilege Escalation via UserApiController
Source: New source Published on: 2026-06-26
CVE-2026-12411 - Broken Access Control in Canonical LXD DevLXD API
Source: New source Published on: 2026-06-26
CVE-2026-57667 - WordPress Groundhogg plugin
Source: New source Published on: 2026-06-26
CVE-2026-57663 - WordPress Recipe Maker For Your Food Blog from Zip Recipes plugin
Source: New source Published on: 2026-06-26
CVE-2026-57662 - WordPress Contest Gallery plugin
Source: New source Published on: 2026-06-26
CVE-2026-57659 - WordPress Paid Memberships Pro - Add Member From Admin plugin
Source: New source Published on: 2026-06-26
A Vulnerability in PAN-OS Could Allow for Authentication Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-06-22
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-06-16
A Vulnerability in SimpleHelp Could Allow for Authentication Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-06-16
A Vulnerability in Oracle PeopleSoft PeopleTools Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-06-11
Critical Patches Issued for Microsoft Products, June 9, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-06-09
Multiple Vulnerabilities in Check Point Products Could Allow for Authentication Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-06-09
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-06-09
A Vulnerability in Cisco Products Could Allow for Server-Side Request Forgery
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-06-05
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-20
Multiple Vulnerabilities in NGINX Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-18
A Vulnerability in Microsoft Exchange Server Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-15
Multiple Vulnerabilities in Fortinet Products Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-12
Critical Patches Issued for Microsoft Products, May 12, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-12
Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-12
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-12
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-07
A Vulnerability in PAN-OS Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-06
A Vulnerability in Apache HTTP Server Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-06
A Vulnerability in WHM cPanel and WP Squared Could Allow for Remote Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-05-04
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-04-28
Oracle Quarterly Critical Patches Issued April 21, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-04-28
A Vulnerability in OpenSSH Could Allow for Authentication Bypass
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-04-28
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-04-21
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-04-16
Critical Patches Issued for Microsoft Products, April 14, 2026
Source: Center for Internet Security (CIS) – Advisories feed Published on: 2026-04-14

Older posts

Secure Your Business Today!

Contact LACyber today to schedule a consultation and take the first step towards building a more secure, resilient digital infrastructure for your business.