Actionable Threat News for Defenders
Cyber Strike News is a daily threat briefing for defenders. Each story separates what is confirmed from what is not, says who is affected and what to do, and links the primary sources. Browse by topic below, read the weekly digest, or see how we work in our editorial policy.
LIVE Latest threat news
-
This week in security: Brotli, Barracuda and Outlook exploited
Weekly security digest for week 46: exploited Brotli, Barracuda and Outlook flaws, 11 new CISA KEV entries and what to patch first…
-
Brotli flaw CVE-2026-111497 exploited; Node.js and Cisco fixes
CISA lists Brotli decoder flaw CVE-2026-111497 as exploited. See affected Node.js, Brotli and .NET versions, fixed releases and how to prioritise patching.
-
Barracuda ESG auth bypass CVE-2026-116606 exploited, chains with CVE-2026-111560
CISA added two chained Barracuda flaws to KEV. Check ESG, WAF and gateway firmware, patch before the 13 November deadline and hunt…
-
Microsoft Outlook spoofing flaw CVE-2026-124194 added to CISA KEV
CISA says attackers are exploiting Outlook flaw CVE-2026-124194. Federal agencies must act by 24 November; see affected Office builds and what to…
-
Chrome CVE-2026-125350 use-after-free exploited, added to CISA KEV
CISA says Chrome flaw CVE-2026-125350 is exploited. Update Chrome to 157.0.8103.50 or later, check Chromium-based browsers, and meet the 24 November deadline.
Vulnerabilities View all →
Threats & Malware View all →
Free Security & Network Tools
Data Breaches View all →
Patch Tuesday & Advisories View all →
Cloud & AppSec View all →
Explainers and free tools: What is CVSS? · What is EPSS? · What is the CISA KEV catalog? · All free tools · Patch prioritization guide · What is a CVE? · Subnetting cheat sheet