Actionable Threat News for Defenders
Cyber Strike News is a daily threat briefing for defenders. Each story separates what is confirmed from what is not, says who is affected and what to do, and links the primary sources. Browse by topic below, read the weekly digest, or see how we work in our editorial policy.
LIVE Latest threat news
-
This week in security: k0t edge attacks, PHP2Shell and LiteLLM
Weekly security digest for 2026-W43: edge device attacks, PHP RCE flaws, a supply chain compromise, new CISA KEV additions and what to…
-
LiteLLM supply chain attack traced to leaked master key
A master key committed to a public GitHub repo in May was never revoked, letting an attacker publish a malicious LiteLLM release…
-
Firewall and VPN breaches by actor k0t expose 70,000+ credentials
Group-IB and NyxLab link k0t to attacks on FortiGate and GlobalProtect edge devices. See the attack chain, who is hit and the…
-
Microsoft Teams adds AI phishing detection for external chats
Microsoft Teams will scan conversation context for phishing from November 2026. See what the feature covers, what admins must do and how…
-
PHP2Shell: PHP RCE flaws CVE-2026-109618 and CVE-2026-109619
Two critical PHP RCE flaws, dubbed PHP2Shell, have public proof of concept and live attacks. Check your PHP and PAN-OS exposure and…
Vulnerabilities View all →
Threats & Malware View all →
Free Security & Network Tools
Data Breaches View all →
Patch Tuesday & Advisories View all →
Cloud & AppSec View all →
Explainers and free tools: What is CVSS? · What is EPSS? · What is the CISA KEV catalog? · All free tools · Patch prioritization guide · What is a CVE? · Subnetting cheat sheet