Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

4 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 4 most recent headlines Filtered view

CERT/CC warns an unpatched backdoor in several Tenda routers lets attackers bypass login and gain full admin access with a hidden password. CERT/CC published an alert documenting an undocumented authentication backdoor in multiple Tenda firmware versions, tracked as CVE-2026-11405. The flaw gives anyone who knows the right password full administrative access to the device’s web […]

Security Affairs 7 Jul 2026, 9:45 p.m. Incident · 5 stories CVE-2026-11405 Authentication Backdoor Bypass CVE Firmware Flaw Patch Routers Warning

F5 released emergency updates for critical NGINX flaws (CVE-2026-42530, CVE-2026-42055) that could enable unauthenticated code execution. F5 has issued out-of-band patches for multiple NGINX vulnerabilities, including two critical flaws, respectively tracked as CVE-2026-42530 and CVE-2026-42055 (CVSS 9.2). The bugs affect HTTP modules and can be exploited remotely without authentication to trigger memory corruption, potentially causing […]

Security Affairs 19 Jun 2026, 2:07 a.m. Incident · 3 stories CVE-2026-42530 CVE-2026-42055 Authentication Critical Vulnerability CVE F5 Flaw Patch Unauthenticated Vulnerability

Cisco patched a critical Unified CM flaw with public PoC code that allows unauthenticated attackers to launch SSRF attacks remotely. Cisco has addressed a high-severity vulnerability, tracked as CVE-2026-20230, affecting Unified CM and Unified CM SME. The flaw, caused by improper validation of certain HTTP requests, allows a remote attacker without authentication to perform server-side […]

Security Affairs 5 Jun 2026, 1:10 a.m. Incident · 6 stories Actively exploited CVE-2026-20230 Authentication Cisco CVE Exploit Flaw Patch PoC Unauthenticated Vulnerability

Threat actors are exploiting a critical FortiClient EMS flaw, tracked as CVE-2026-35616, to deploy malware on unpatched systems. Threat actors are exploiting a critical FortiClient EMS vulnerability, tracked as CVE-2026-35616 (CVSS score of 9.1), that allows remote code execution without authentication. Fortinet released fixes in April after confirming zero-day attacks in the wild and urged […]

Security Affairs 29 May 2026, 4:05 a.m. Incident · 3 stories Actively exploited CVE-2026-35616 0-Day Authentication CVE Flaw Fortinet Malware Patch Remote Code Execution Theft Threat Actor Vulnerability