Cyber
Cybersecurity news from CISA, NIST, the FBI, national CERTs and vendor security teams: exploited vulnerabilities, advisories, breaches, ransomware and enforcement.
Vulnerability Watch, November 9, 2026: 16 critical CVEs and 2 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
How to Delete Your Data From Data Brokers With California DROP
The California Privacy Protection Agency provides instructions for using the Delete Request and Opt-out Platform to remove personal information from data brokers.
California Privacy Protection Agency
Top 10 vulnerabilities of the week (Nov 3–9, 2026): 3 actively exploited
This week's 10 most urgent vulnerabilities, including 3 CISA confirmed as actively exploited, ranked from CISA and NIST data.
CISA
Fake App and Login Screens Target China Construction Bank Customers
The Hong Kong Monetary Authority has issued an alert regarding fraudulent websites, mobile apps, and phishing login screens impersonating China Construction Bank (Asia).
Hong Kong SAR Government
How to Use Signal for Secure and Private Messaging
Learn how to set up and use Signal for end-to-end encrypted messaging with guidance from the Electronic Frontier Foundation.
Electronic Frontier Foundation
Vulnerability Watch, November 8, 2026: 11 critical CVEs and 2 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
Vulnerability Watch, November 7, 2026: 60 critical CVEs and 18 new vendor and CERT advisories
Every critical-severity CVE NIST published in the past day, plus the latest advisories from national CERTs and vendors.
NIST
CVEs that matter, November 7, 2026: 5 to patch first, 2 exploited
This week's vulnerabilities with real evidence of attack, led by CVE-2026-19868 in SonicWall SonicOS SSLVPN.
CISA
The Privacy Week, November 6, 2026: How to Find Unknown Trackers Following You With Android
This week in privacy: 5 stories, led by How to Find Unknown Trackers Following You With Android.
TechUpscale
ESXi and Proxmox Breaches Fueled by Reused Passwords and Plain Text
Kaspersky investigated ransomware cases where weak access controls, reused root passwords, and plain text notes allowed attackers to compromise virtual environments.
Kaspersky