Cisco on Wednesday warned customers that hackers have been exploiting a critical-severity vulnerability in Secure Email Gateway. Tracked as CVE-2026-76519 (CVSS score of 9.8/10), the security defect impacts the Advanced Malware Protection (AMP) feature of the appliance and could allow… Read More "Cisco Warns of Exploited Secure Email Gateway Vulnerability"
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
Palo Alto Networks on Wednesday informed customers that it has released patches for a PAN-OS zero-day vulnerability exploited in malicious attacks. The high-severity flaw is tracked as CVE-2026-0322 and it allows remote code execution. It affects the management interface of… Read More "Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution"
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
Microsoft’s October 2026 Patch Tuesday updates fix a record-breaking number of vulnerabilities, including a Windows zero-day exploited in the wild. According to Microsoft, the latest updates resolve 1,413 CVEs, including 1,102 affecting Windows, 134 in Office, 61 in developer tools,… Read More "Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day"
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
Ivanti on Tuesday warned customers that a zero-day vulnerability in its Connect Secure (ICS) VPN appliances has been exploited in the wild. Tracked as CVE-2026-104935 and rated high severity, the issue is an authentication bypass that lets a remote, unauthenticated… Read More "Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN"
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
A critical vulnerability in the Bricksforge WordPress plugin is being exploited in the wild, according to WordPress security company Patchstack. The vulnerability is tracked as CVE-2026-85097 and it has a CVSS score of 9.8. Unauthenticated attackers can exploit it to… Read More "Bricksforge WordPress Plugin Vulnerability Exploited in the Wild"
Critical SonicWall Vulnerability Exploited Days After Disclosure
Threat actors started exploiting a recently patched critical vulnerability in SonicWall SMA1000 appliances within days after public disclosure. Tracked as CVE-2026-102255 (CVSS score of 10), the security defect is described as a pre-authenticated server-side request forgery (SSRF) issue affecting the… Read More "Critical SonicWall Vulnerability Exploited Days After Disclosure"
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products. The attacks began shortly after technical details went public. Atlassian disclosed the bug on October 5 and gave it a CVSS score of 9.3. It… Read More "Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication"
Exploitation Hits Rejetto HFS Vulnerability Discovered by AI
Threat actors are exploiting a critical vulnerability in Rejetto HTTP File Server (HFS) to bypass authentication and gain remote code execution (RCE), VulnCheck warns. Tracked as CVE-2026-61500 (CVSS score of 9.3), the flaw exists because the open source file server… Read More "Exploitation Hits Rejetto HFS Vulnerability Discovered by AI "
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
Citrix NetScaler administrators scrambled over the weekend to protect their appliances after exploitation of a new zero-day vulnerability began. Administrators initially reported reboots of fully patched NetScaler systems on Friday, and Citrix soon confirmed the existence of another zero-day exploited… Read More "Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier"
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
The Warlock ransomware group continues to target SharePoint servers in attacks against critical infrastructure, government, and education entities, Symantec reports. Warlock is believed to be operated by a China-based hacking group tracked as Longlegs and Storm-2603, which has been linked… Read More "Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks"