Aggregator

Top 10 Best Next-Generation Firewall (NGFW) Solutions in 2026 

Cyber Security News
2 weeks 5 days ago

If you’re shortlisting the best next-generation firewall for 2026, Palo Alto Networks’ PA-Series is our top overall pick for its App-ID application control and machine-learning threat prevention, while Fortinet FortiGate delivers the strongest price-to-performance for most mid-market and distributed networks. A next-generation firewall (NGFW) inspects traffic at the application layer, decrypts TLS, blocks intrusions inline, and enforces […]

The post Top 10 Best Next-Generation Firewall (NGFW) Solutions in 2026  appeared first on Cyber Security News.

Cyber Advisory

Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations

The Hackers News
2 weeks 5 days ago
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations. The activity, which has primarily singled out IT providers and government sectors, has been attributed to a threat cluster tracked by Check Point Research
The Hacker News

CVE-2026-48558

CVE Trends
2 weeks 5 days ago
Currently trending CVE - Hype Score: 3 - SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic ...

CVE-2025-14180

CVE Trends
2 weeks 5 days ago
Currently trending CVE - Hype Score: 4 - In PHP versions 8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTR_EMULATE_PREPARES enabled, an invalid character sequence (such as \x99) in a prepared statement parameter may ...

CVE-2026-42588

CVE Trends
2 weeks 5 days ago
Currently trending CVE - Hype Score: 7 - Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default ...

CVE-2025-14179

CVE Trends
2 weeks 5 days ago
Currently trending CVE - Hype Score: 4 - In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL queries. During token-by-token query construction, a string token containing a NUL byte is copied via ...

CVE-2026-34197

CVE Trends
2 weeks 5 days ago
Currently trending CVE - Hype Score: 1 - Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy ...

CVE-2025-29824

CVE Trends
2 weeks 5 days ago
Currently trending CVE - Hype Score: 5 - Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Managed ad