Actionable Threat News for Defenders
Cyber Strike News is a daily threat briefing for defenders. Each story separates what is confirmed from what is not, says who is affected and what to do, and links the primary sources. Browse by topic below, read the weekly digest, or see how we work in our editorial policy.
LIVE Latest threat news
-
Meta GitHub breach: stolen employee credentials expose code and data
Meta is notifying about 1,500 people after attackers used a stolen employee login to reach GitHub repositories. See what was taken and…
-
Microsoft Patch Tuesday October 2026: 348 CVEs, none exploited
Microsoft’s October 2026 Patch Tuesday fixes 348 CVEs, 104 rated Critical, with no zero-days. See the five fixes to deploy first and…
-
Xandr fined record €8.6M over Grindr data sharing in Norway
Norway’s data protection authority fined Microsoft-owned Xandr €8.6M for relaying Grindr users’ sensitive data. See what it means for your ad-tech risk.
-
Ivanti Connect Secure auth bypass added to CISA KEV (CVE-2026-104935)
CISA added an Ivanti Connect Secure authentication bypass to its KEV catalog with a 16 October deadline. See who is affected and…
-
GitLab CI/CD regex flaw allows unauthenticated RCE (CVE-2026-97229)
GitLab fixed a CVSS 10.0 remote code execution flaw in 19.4.2, 19.3.5 and 19.2.8. Check your self-managed version and upgrade today.
Vulnerabilities View all →
Threats & Malware View all →
Free Security & Network Tools
Data Breaches View all →
Patch Tuesday & Advisories View all →
Cloud & AppSec View all →
Explainers and free tools: What is CVSS? · What is EPSS? · What is the CISA KEV catalog? · All free tools · Patch prioritization guide · What is a CVE? · Subnetting cheat sheet