Cybersecurity News
-
Cisco Patches Critical Unified Communications Vulnerability and Additional Security Flaws
Cisco has released multiple security updates affecting enterprise communications, contact center, and infrastructure platforms widely deployed in production environments. Among the issues addressed is a critical remote code execution vulnerability that Cisco…
-
Zoom Patches Node Deployments Vulnerability
Zoom has patched a command injection vulnerability affecting its Node Multimedia Router infrastructure in on-premises and hybrid deployments. Zoom Node is an enterprise hybrid deployment platform that allows large organizations to run…
-
Cloudflare Fixes Security Flaw That Temporarily Bypassed Web Application Firewall
Cloudflare has resolved a security vulnerability in its certificate validation logic that could temporarily bypass web application firewall (WAF) protections. The issue, affecting ACME (Automatic Certificate Management Environment), was reported by security…
-
Researchers Show How Calendar Invites Can Be Used to Manipulate AI Assistants
Security researchers have demonstrated a new way that artificial intelligence features can be misused without exploiting traditional software bugs. In recent research published by application security firm Miggo, a standard Google Calendar…
-
Outdated Windows Authentication Protocol Being Phased Out
A Windows authentication method that security experts have warned about for decades is once again in the spotlight. Net-NTLMv1, a legacy protocol used in some Microsoft Active Directory environments, is being actively…
-
Bluetooth Flaw “WhisperPair” Found in Some Wireless Audio Devices
Cybersecurity researchers from KU Leuven, a Belgian university, have disclosed a Bluetooth vulnerability called WhisperPair, affecting certain audio devices that implement Google Fast Pair technology. The findings were published as part of…
-
Node.js Patches Critical Denial-of-Service Vulnerability Affecting React and Next.js Applications
The Node.js project has released security patches addressing a denial-of-service vulnerability that causes applications to crash when processing deeply nested data. The issue affects React Server Components, Next.js, and all major application…
-
Instagram Confirms Password Reset Email Issue, No Account Breach
Instagram has confirmed it recently fixed an issue that allowed an external party to request password reset emails for some users. In a statement posted on X (formerly Twitter) on January 10,…
-
Trend Micro Releases Critical Security Update for Apex Central On-Premise
Trend Micro has released a critical security update addressing multiple vulnerabilities in Apex Central (on-premise), its centralized management platform for Trend Micro security products. The advisory, published on January 7, 2026, applies…