Actionable Threat News for Defenders
Cyber Strike News is a daily threat briefing for defenders. Each story separates what is confirmed from what is not, says who is affected and what to do, and links the primary sources. Browse by topic below, read the weekly digest, or see how we work in our editorial policy.
LIVE Latest threat news
-
SonicWall SonicOS SSLVPN MFA bypass CVE-2026-19868 exploited
CISA added SonicWall SonicOS SSLVPN flaw CVE-2026-19868 to its KEV list. Check SAML MFA enforcement and apply vendor mitigations by 20 November.
-
This week in security: OpenSSH, Zyxel and Apple exploited flaws
Week 45 recap: exploited OpenSSH, Zyxel, Apple, WordPress and Cisco flaws, four CISA KEV additions and what to prioritise next week.
-
OpenSSH CVE-2026-123158 auth bypass on Alpine Linux exploited
OpenSSH CVE-2026-123158 lets attackers log in to passwordless accounts on musl-based Linux such as Alpine. Exploitation is reported. Upgrade to 10.6p2.
-
Zyxel GS1900 switch zero-day CVE-2026-107441 bypasses June patch
Switches fixed for CVE-2026-7273 stayed exploitable through CVE-2026-107441. Check GS1900 firmware, move to 2.90 Patch 3 and review management access.
-
Apple CVE-2024-27834 pointer authentication bypass exploited, added to CISA KEV
CISA added Apple’s CVE-2024-27834 to KEV after reported exploitation. Check iOS, macOS and Safari versions and patch before the November 18 deadline.
Vulnerabilities View all →
Threats & Malware View all →
Free Security & Network Tools
Data Breaches View all →
Patch Tuesday & Advisories View all →
Cloud & AppSec View all →
Explainers and free tools: What is CVSS? · What is EPSS? · What is the CISA KEV catalog? · All free tools · Patch prioritization guide · What is a CVE? · Subnetting cheat sheet