Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

The Hacker News - Oct 22, 2026

Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. For

Read full article

More News

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

Oct 22, 2026

eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. eMudhra said it will replace affected customers' certificates with free ones from partners, though its

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

Oct 22, 2026

This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't even over yet. But those big headlines are only half the story. Stolen passwords, exposed

Trump Ties Disaster Aid to Votes as Midterm Fight Heats Up

Trump Ties Disaster Aid to Votes as Midterm Fight Heats Up

Oct 22, 2026

President Trump and Vice President JD Vance have dangled FEMA money to disaster-struck states during recent campaign rallies.

A.I. and Its Dangers Are Embedded In the Midterm Elections

A.I. and Its Dangers Are Embedded In the Midterm Elections

Oct 22, 2026

The midterms are the first elections in which artificial intelligence is integrated into every major social media platform. Efforts to blunt its harms are uneven.

A.I. and Its Dangers Are Embedded In the Midterm Elections

A.I. and Its Dangers Are Embedded In the Midterm Elections

Oct 22, 2026

The midterms are the first elections in which artificial intelligence is integrated into every major social media platform. Efforts to blunt its harms are uneven.

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Oct 22, 2026

Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. The other, ZDI-CAN-33549, requires the SMB Direct transport and an RDMA-capable network

Mortgage Rates Remain Above 7%, Pushing Home Prices Lower in Some Areas

Mortgage Rates Remain Above 7%, Pushing Home Prices Lower in Some Areas

Oct 22, 2026

The 30-year, fixed-rate mortgage dropped slightly to 7.32 percent as prospective home buyers continue to struggle with affordability. But home prices are starting to drop in some areas.

Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations

Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations

Oct 22, 2026

Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company's Cambridge Analytica data scandal, which came to light in 2018. According to multiple reports from the Associated Press, the New York Times, Reuters, and the Wall Street Journal, state District Court Judge Francis J. Mathew called

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

Oct 22, 2026

Governments and businesses around the world scrambled to prevent hackers from exploiting a vulnerability in PHP, a popular programming language.

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

Oct 22, 2026

Governments and businesses around the world scrambled to prevent hackers from exploiting a vulnerability in PHP, a popular programming language.

What Is PHP? Why Are Government and Business Websites Going Offline?

What Is PHP? Why Are Government and Business Websites Going Offline?

Oct 22, 2026

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

What Is PHP? Why Are Government and Business Websites Going Offline?

What Is PHP? Why Are Government and Business Websites Going Offline?

Oct 22, 2026

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

Recommended

24-7 Reporters

24-7 Reporters publishes up-to-the-minute news 24 hours a day, 7 days a week. Our certified reporters are among the most experienced, well-trained and talented across the globe, covering issues resonating progressives in every corner of the world.

ABOUT US
Sign Up

Copyright © 2015 - 2026 24-7 Reporters. All Rights Reserved.