Actionable Threat News for Defenders
Cyber Strike News is a daily threat briefing for defenders. Each story separates what is confirmed from what is not, says who is affected and what to do, and links the primary sources. Browse by topic below, read the weekly digest, or see how we work in our editorial policy.
LIVE Latest threat news
-
Chrome CVE-2026-125350 use-after-free exploited, added to CISA KEV
CISA says Chrome flaw CVE-2026-125350 is exploited. Update Chrome to 157.0.8103.50 or later, check Chromium-based browsers, and meet the 24 November deadline.
-
Phishing triage: a step-by-step playbook for reported emails
A practical phishing triage playbook for small security teams: collect headers, check SPF, DKIM and DMARC, inspect links safely, and respond fast.
-
Microsoft Patch Tuesday November 2026: 1,342 CVEs, 2 exploited
Microsoft fixed 1,342 CVEs in November 2026, including an exploited Outlook flaw and a KEV-listed OpenSSH bypass. See what to patch first.
-
FreeSWITCH and Aspera Faspex flaws exploited (CVE-2026-116779)
CISA added FreeSWITCH CVE-2026-116779 and IBM Aspera Faspex CVE-2026-123218 to KEV. Check your versions and patch before the 12 November deadline.
-
GPUStack auth bypass CVE-2026-102895 added to CISA KEV
GPUStack before 2.2.0 has an exploited authentication bypass giving unauthenticated admin access. See who is affected and how to fix it before…
Vulnerabilities View all →
Threats & Malware View all →
Free Security & Network Tools
Data Breaches View all →
Patch Tuesday & Advisories View all →
Cloud & AppSec View all →
Explainers and free tools: What is CVSS? · What is EPSS? · What is the CISA KEV catalog? · All free tools · Patch prioritization guide · What is a CVE? · Subnetting cheat sheet