📌 1. New Zero-Day Vulnerability Exploited (CVE-2026-24858)Fortinet confirmed in late January 2026 a critical authentication vulnerability in FortiCloud SSO that is being openly exploited in real-world attacks....

The CCN-CERT, of the National Cryptologic Center, is alerting to the active exploitation of vulnerability CVE-2026-24858, published by Fortinet in its latest security advisory and related to FortiOS single sign-on (SSO)....

Astaroth is a new distribution vector that uses WhatsApp to carry out targeted attacks. According to researchers, there is a new campaign in Brazil against the messaging application that, through a Windows banking trojan, sends malicious systems to users....

QNAP published a security advisory addressing multiple vulnerabilities in its application.These flaws could allow cyber attackers to steal confidential information, block system processes, or modify the memory of storage devices....

The MongoDB database suffers the first high-level vulnerability of 2026, called MongoBleed. Classified as CVSS 8.7, it allowed attackers to read sensitive data directly from the memory of affected servers without authentication....

Iberia is advising its customers to be vigilant for any suspicious communications they may receive following the data breach that occurred on Saturday, November 29....

The technology company Qualcomm, associated with Android devices, reported a weakness yesterday, November 4, of which 10 vulnerabilities were classifyed as high severity....

Meta Platforms has announced a major update to its security tools for its messaging services (WhatsApp and Messenger) to better protect users from the rising wave of digital scams....

WhatsApp issued a global warning after discovering a chain of vulnerabilities that allowed attackers to infiltrate devices simply by sending a file in a chat.  ...

Samsung is releasing a targeted security update to address a serious zero-day vulnerability identified as CVE-2025-21043....