Cybersecurity
Invincible News
DHS Staff Leak: 40,000+ Employees Exposed by Hacktivists
Hacktivists leaked data on 40,000+ DHS employees, some in undercover roles. Here is what is confirmed, what is disputed, and how to respond.
Invincible News
Low-Rated VMware ESX Logging Flaw Was a China-Linked Zero-Day
CISA lists VMware ESX flaw CVE-2026-41709, rated Low by Broadcom but used as a zero-day by China-linked WARP PANDA. Patch guidance and checks inside.
Invincible News
Binance Hack: $6.3B Stolen, North Korea Blamed
Binance says hackers drained about $6.3 billion from hot wallets. Researchers blame North Korea’s TraderTraitor; $2.85B frozen. What users should do.
Invincible News
Ivanti Connect Secure Zero-Day Chain Gives Root; Patch Now
Attackers chained Ivanti Connect Secure flaws to take over VPNs without a login. CISA added two more to KEV on Oct 30. Patch and check for signs of attack.
Invincible News
Drupal Commerce Core Flaw Exploited; Update and Audit Orders
Drupal says a highly critical access bypass in Commerce Core is being exploited. Update to 3.3.13 or 8.x-2.41 and audit recent orders for fraud.
Invincible News
WordPress 7.1.4 Fixes Core RCE Flaw Under Heavy Attack
WordPress 7.1.4 fixes a core remote code execution flaw in the upgrade process. Wordfence blocked 62,969 attacks in 24 hours. Update and check logs.
Invincible News
GitLab CVSS 10 Flaw Now Exploited; CISA Adds It to KEV
CISA added GitLab’s CVSS 10.0 flaw CVE-2026-97229 to its KEV list after an attack attempt on Alpine Linux. Who is affected and how to patch it.
Invincible News
Exploited Cisco ASA, FTD Flaw Can Reboot VPN Firewalls
Cisco says attackers are exploiting CVE-2026-76418, a flaw that can reboot ASA and FTD firewalls running SSL VPN with secondary authentication.
Invincible News
Sony So-net, plala Breach Exposes 2.59M Customer Records
Sony says an intruder took 2.59 million So-net and plala customer records, including 54,401 email passwords. Here is what was exposed and what to do now.
Invincible News
UNM Health Cyberattack Cancels Care; Group Claims Data Theft
UNM Health cancelled appointments and diverted ambulances after a cyberattack. A group called Byod claims data theft; UNM disputes it. What to know.
Invincible News
Exploited Brotli Flaw Threatens Node.js Servers: Patch Now
CISA says attackers are exploiting CVE-2026-111497, a critical Brotli decoder bug in Node.js and other software. Here is who is affected and how to patch.
Invincible News
GMO Desktop Cloud Hack: $50M Demand and Leaked Customer Data
Japan’s GMO Internet confirms customer data theft from its Onamae.com Desktop Cloud, refused a $50M ransom demand, and urges FX traders to reset passwords.