See which cyber attacks are happening now, before they reach you.
Every hour we read US government security alerts and trusted security news, pick out what matters, and explain it in plain English for the people who run a business.
- 1,766
- Flaws hackers are using
- 3
- Must be fixed within 7 days
- 59
- News stories in the last 24 hours
The biggest threats this week
See all news →- 01Used in attacksVMware · BroadcomCanadian Centre for Cyber Security · 2026-10-28VMware security advisory (AV26-763) – Update 2
CVE-2026-59310 · CVE-2026-59309
- 02Used in attacksBeyondTrustRapid7 Blog · 2026-10-30Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)
CVE-2026-102764
- 03Used in attacksGitLab · LinuxSecurityWeek · 2026-10-30Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
CVE-2026-97229
- 04Used in attacksCisco · GitLabThe Hacker News · 2026-10-30CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
CVE-2026-97229
- 05Used in attacksAppleThe Hacker News · 2026-10-27Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
CVE-2026-86950
- 06Used in attacksIvantiRapid7 Blog · 2026-11-02Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
CVE-2026-104935 · CVE-2026-111357
What changed, and what to do about it.
This week’s briefing →Weekly briefing · 2026-11-02
10 incidents were disclosed in the last seven days. The largest is AfD, with 345,439 records affected. CISA added 5 flaws to its list of those used in attacks. On the compliance side, a Treasury Department rule takes effect on 5 November 2026.
Read the full briefing →Free every Monday
- A short summary anyone can read. What happened this week and what it means for a business.
- Technical details for IT teams. The flaws, the affected products and what to do, for subscribers.
- Your industry, if you like. A version with only the news that affects your sector.
We collect the news, rank it and explain it.
We collect it every hour
US government security alerts and well-known security news sites. Nothing behind a paywall, and every item links to where it came from.
We rank what matters most
A flaw attackers are already using comes before a rumour, and a story two outlets confirm comes before one only a single outlet reported. Trusted sources count for more.
We write it up for you
A weekly email every Monday, and a short daily one if you want it. Each starts with a summary anyone can read, then the technical details for subscribers. You can also get a version for just your industry.
See only what affects your industry.
All industries →- Finance15 this weekBanking, insurance, payments and fintech.
- Healthcare11 this weekHospitals, clinics, medical devices and health insurers.
- Manufacturing11 this weekIndustrial control systems, OT networks and supply chains.
- Retail & e-commerce9 this weekStorefronts, payment card data and online marketplaces.
- SaaS & technology13 this weekSoftware vendors, cloud providers and managed service providers.
- Government51 this weekPublic sector, defence and critical national infrastructure.
Free briefing
Get the week’s threats in your inbox.
One email every Monday, and a short daily one if you want it. We send the briefing and nothing else, and you can unsubscribe in one click.
CyberBrief is made by Fastnexa, a company that tests business security by trying to break in, then helps fix what it finds. What we do →