Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

The Hacker News - Oct 22, 2026

Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. For

Read full article

More News

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

Oct 22, 2026

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't even over yet. But those big headlines are only half the story. Stolen passwords, exposed

Trump Ties Disaster Aid to Votes as Midterm Fight Heats Up

Oct 22, 2026

Trump Ties Disaster Aid to Votes as Midterm Fight Heats Up

President Trump and Vice President JD Vance have dangled FEMA money to disaster-struck states during recent campaign rallies.

A.I. and Its Dangers Are Embedded In the Midterm Elections

Oct 22, 2026

A.I. and Its Dangers Are Embedded In the Midterm Elections

The midterms are the first elections in which artificial intelligence is integrated into every major social media platform. Efforts to blunt its harms are uneven.

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Oct 22, 2026

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. The other, ZDI-CAN-33549, requires the SMB Direct transport and an RDMA-capable network

Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations

Oct 22, 2026

Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations

Social media giant Meta was ordered to pay 25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy lawsuit that sprang from the company's Cambridge Analytica data scandal, which came to light in 2018. According to multiple reports from the Associated Press, the New York Times, Reuters, and the Wall Street Journal, state District Court Judge Francis J. Mathew called

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

Oct 22, 2026

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

Governments and businesses around the world scrambled to prevent hackers from exploiting a vulnerability in PHP, a popular programming language.

What Is PHP? Why Are Government and Business Websites Going Offline?

Oct 22, 2026

What Is PHP? Why Are Government and Business Websites Going Offline?

A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

Storm Josephine sparks hurricane-force wind warning as towering 34-foot waves threaten waters off US East Coast

Oct 22, 2026

Storm Josephine sparks hurricane-force wind warning as towering 34-foot waves threaten waters off US East Coast

A hybrid storm is moving along the US East Coast, bringing dangerous conditions to Americans hundreds of miles from its center.

Scientists pinpoint the exact sky that inspired Van Gogh's The Starry Night

Oct 22, 2026

Scientists pinpoint the exact sky that inspired Van Gogh's The Starry Night

Vincent Van Gogh's The Starry Night is one of the most iconic works of art ever produced - and now experts have discovered what the painting really shows.

How a Legal Backlash Against Big Tech Is Forcing Big Changes

Oct 22, 2026

How a Legal Backlash Against Big Tech Is Forcing Big Changes

A series of lawsuits has created a new de facto regulatory regime as courts order companies like Meta and Google to change their business practices — and pay up.

Worldwide website emergency explained: How a critical PHP weakness sparked a global cybersecurity alert - and exactly what it means for you

Oct 22, 2026

Worldwide website emergency explained: How a critical PHP weakness sparked a global cybersecurity alert - and exactly what it means for you

A critical weakness has gone unnoticed in the very foundations of the internet for decades, but now AI has triggered a global cybersecurity alert by bringing it to light.

Cyclone Josephine forms near US East Coast as nine states are warned of storm's impact

Oct 22, 2026

Cyclone Josephine forms near US East Coast as nine states are warned of storm's impact

Hurricane trackers announced that Cyclone Josephine has formed off the US East Coast. Forecasts show nine states could see storm impacts for days.

Recommended

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

Oct 22, 2026

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. eMudhra said it will replace affected customers' certificates with free ones from partners, though its

The Next Discovery

The Next Discovery is equipped with recent Science & Tech news to impart knowledge to individuals awaiting the future.

ABOUT US
NEWSLETTER

Copyright © 2015 - 2026 The Next Discovery. All Rights Reserved.