Top 10 Best SIEM Tools in 2026 [Ranked & Scored]

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The SIEM is the SOC’s memory and its biggest line item, and 2026’s rankings reflect a market reshaped by consolidation: Cisco absorbed Splunk, Exabeam and LogRhythm merged into one company, and the hyperscalers turned SIEM into a cloud-native data race. …

CISA Warns of VMWare ESX Logging Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency has added a VMware ESX logging flaw to its Known Exploited Vulnerabilities catalog following evidence of exploitation. Tracked as CVE-2026-41709, the vulnerability allows an attacker with administrator access to perform certain operations without those …

Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Crash SSL VPN Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco released security updates for actively exploited CVE-2026-76418, a flaw in Secure Firewall ASA and FTD software that lets unauthenticated remote attackers force device restarts, causing denial of service and disrupting remote access. The high-severity vulnerability carries a CVSS score …

Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers combined PHP2Shell vulnerabilities with a Linux kernel exploit to gain root access on 25 servers across the United States, Japan, Taiwan, and South Korea, including three systems in a US government-affiliated environment. Dream researchers uncovered the campaign’s files on …

Hackers Leak Records of 41,000 DHS Personnel, Exposing Undercover ICE Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A leak of records covering more than 41,000 Department of Homeland Security employees and contractors has exposed contact details, work assignments, and links to sensitive operations, including undercover ICE work. Published on October 28, the archive reveals far more than …

WatchGuard Discloses 7 Critical Firewall Flaws Allowing Remote Code Execution and Root-Level Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WatchGuard disclosed seven critical Fireware OS vulnerabilities in an October 27, 2026 advisory, affecting Firebox firewalls and potentially enabling remote code execution, root-level action injection, and memory corruption. They are part of a wider release that covers 18 security issues …

Fortinet Brings AI Agent Security to Oracle Cloud to Block Prompt Injection and Data Leaks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet’s FortiAIGate is bringing AI security controls to enterprise workloads on Oracle Cloud Infrastructure (OCI), helping businesses inspect prompts, block sensitive data leaks, and control agent actions. An Oracle announcement published October 27 outlines how customers can combine the self-hosted …

WordPress 7.1.4 Fixes 22 Security Flaws, Including an Unauthenticated RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress released version 7.1.4 on October 28, 2026, fixing 22 security flaws, including an unauthenticated remote code execution vulnerability in its update process. The security release also addresses stored cross-site scripting, data exposure, and access control issues. WordPress urges website …

OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec today announced the release of a free, interactive hands-on lab in Proving Grounds Play (PG …

Researcher Uncovers New 0-click Flaw in Telegram Stickers and Chained Them to Run Code on iOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Saifeldeen Aziz says he found new zero-click bugs in Telegram stickers. He also says he chained them to run code on iOS. The work was due to be presented on October 28 at OffensiveCon in Tokyo, according to …