Actionable Threat News for Defenders
Cyber Strike News is a daily threat briefing for defenders. Each story separates what is confirmed from what is not, says who is affected and what to do, and links the primary sources. Browse by topic below, read the weekly digest, or see how we work in our editorial policy.
LIVE Latest threat news
-
Firewall and VPN breaches by actor k0t expose 70,000+ credentials
Group-IB and NyxLab link k0t to attacks on FortiGate and GlobalProtect edge devices. See the attack chain, who is hit and the…
-
Microsoft Teams adds AI phishing detection for external chats
Microsoft Teams will scan conversation context for phishing from November 2026. See what the feature covers, what admins must do and how…
-
PHP2Shell: PHP RCE flaws CVE-2026-109618 and CVE-2026-109619
Two critical PHP RCE flaws, dubbed PHP2Shell, have public proof of concept and live attacks. Check your PHP and PAN-OS exposure and…
-
Collabora CODE Server flaw exploited in Nextcloud (CVE-2026-110447)
CISA added CVE-2026-110447, a Collabora CODE Server command injection used inside Nextcloud, to KEV. Update to 26.4.303 before the 26 October deadline.
-
Arista VeloCloud Orchestrator flaw exploited (CVE-2026-114625)
CISA added Arista VeloCloud Orchestrator CVE-2026-114625 to KEV with a 26 October deadline. See who is affected, how urgent it is and…
Vulnerabilities View all →
Threats & Malware View all →
Free Security & Network Tools
Data Breaches View all →
Patch Tuesday & Advisories View all →
Cloud & AppSec View all →
Explainers and free tools: What is CVSS? · What is EPSS? · What is the CISA KEV catalog? · All free tools · Patch prioritization guide · What is a CVE? · Subnetting cheat sheet