Actionable Threat News for Defenders
Cyber Strike News is a daily threat briefing for defenders. Each story separates what is confirmed from what is not, says who is affected and what to do, and links the primary sources. Browse by topic below, read the weekly digest, or see how we work in our editorial policy.
LIVE Latest threat news
-
ConnectWise Cloud Backup breach hits Microsoft 365 tenants
Attackers abused ConnectWise Cloud Backup app identities to access Microsoft 365 tenants. Here is who is affected and how to review service…
-
Adobe Commerce BlockStrap RCE flaw patched (CVE-2026-103849)
Patch Adobe Commerce and Magento Open Source for the BlockStrap code execution flaw, CVE-2026-103849. No attacks seen yet, but researchers expect them…
-
UAT-11985 phishing targets Taiwan research staff’s Google accounts
A spear-phishing campaign tracked as UAT-11985 uses fake event invites and QR codes to steal Google logins and MFA codes. See the…
-
Fortinet FortiOS path traversal added to CISA KEV (CVE-2025-61624)
CISA lists Fortinet path traversal CVE-2025-61624 as exploited, due 2026-10-19. See affected FortiOS, FortiPAM, FortiProxy versions and what to patch.
-
This week in security: BeyondTrust, Ivanti and Cisco exploited
Weekly digest: BeyondTrust, Ivanti, Cisco and PAN-OS flaws exploited, nine new CISA KEV entries, big breaches, and what to prioritise next week.
Vulnerabilities View all →
Threats & Malware View all →
Free Security & Network Tools
Data Breaches View all →
Patch Tuesday & Advisories View all →
Cloud & AppSec View all →
Explainers and free tools: What is CVSS? · What is EPSS? · What is the CISA KEV catalog? · All free tools · Patch prioritization guide · What is a CVE? · Subnetting cheat sheet