Security Radar
Discover the latest cybersecurity news, security vulnerabilities and emerging threats. Browse reporting from trusted publishers, explore related CVEs, vendors and products, and identify trending security topics.
Latest News
931 articles foundMicrosoft: Windows Server 2016 reaches end of support in January
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.
Quest Diagnostics confirms data breach exposed patient records
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system.
PHP shares mitigation for new RCE vulnerability with no patch
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.
Kwetsbaarheden in Oracle Fusion Middleware-producten: update nu
Er zijn meerdere kwetsbaarheden gevonden in Oracle Fusion Middleware-producten. Diverse kwetsbaarheden hebben een kritieke score tot CVSS 10.0. Het Nationaal Cyber Security Centrum (NCSC) beoordeelt de kans op misbruik en de mogelijke schade als ‘hoog’. Het advies is om de nieuwste beveiligingsupdates zo snel mogelijk te installeren.
Update: PHP-kwetsbaarheden nog steeds reden om direct te patchen
Er zijn twee kritieke kwetsbaarheden ontdekt in PHP, een veelgebruikte programmeertaal voor websites en webapplicaties. Misbruik van deze kwetsbaarheden kan ertoe leiden dat aanvallers op afstand systemen overnemen. Uit voorzorg had het NCSC zijn website tijdelijk offline gehaald. Ook meerdere andere organisaties, waaronder overheidsinstanties, hadden hun websites preventief uitgeschakeld. Inmiddels zijn beveiligingsupdates (patches) beschikbaar om de kwetsbaarheden te verhelpen.
Kwetsbaarheid in Google Brotli-decoder in Node.js: update nu
Er is een kwetsbaarheid (CVE-2026-111497) gevonden in de Brotli-decompressiebibliotheek van Google, die o.a. wordt gebruikt in Node.js. Het Nationaal Cyber Security Centrum (NCSC) beoordeelt de kans op misbruik als ‘gemiddeld’, maar de mogelijke schade als ‘groot’. Het advies is om de nieuwste beveiligingsupdates zo snel mogelijk te installeren.
HPE patches eight max severity RCE and auth bypass AOS flaws
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues.
Railway warns devs to rotate secrets after potential breach
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week.
Capcom confirms data breach affecting 11.7 million accounts
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.
Microsoft shares how to fix broken Exchange Online EWS apps
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working.
Amazon says PHP2Shell exploitation began 4 days before patches
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday.
Kwetsbaarheden in Gitlab CE en EE met een kritiek risico: update nu
Er zijn 12 kwetsbaarheden gevonden in GitLab Community Edition (CE) en Enterprise Edition (EE). Deze kwetsbaarheden treffen versies vanaf 7.0 tot bepaalde 19.x releases. Eén kwetsbaarheid met kenmerk (CVE-2026-110264) heeft een kritieke score van 10,0. Het Nationaal Cyber Security Centrum (NCSC) beoordeelt de kans op misbruik als ‘gemiddeld’, maar de mogelijke schade is ‘groot’. Het advies is om de nieuwste beveiligingsupdates zo snel mogelijk te installeren.
GitLab warns of new max severity code execution vulnerability
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.
About Security Radar
Security Radar brings together cybersecurity reporting from independent security publishers in one searchable feed. Explore the latest security vulnerabilities, cyberattacks, data breaches and emerging threats without switching between multiple news sources.
BaseFortify connects relevant articles to known CVE identifiers, software vendors and products. These references help you investigate vulnerabilities, discover related reporting and follow security developments affecting technologies that matter to you.
Articles link to their original publishers. For additional vulnerability intelligence, explore our CVE reports and vendor and product information.
