Microsoft’s October 2026 Patch Tuesday updates fix a record-breaking number of vulnerabilities, including a Windows zero-day exploited in the wild. According to Microsoft, the latest updates resolve 1,413 CVEs, including 1,102 affecting Windows, 134 in Office, 61 in developer tools,… Read More "Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day"
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
Ivanti on Tuesday warned customers that a zero-day vulnerability in its Connect Secure (ICS) VPN appliances has been exploited in the wild. Tracked as CVE-2026-104935 and rated high severity, the issue is an authentication bypass that lets a remote, unauthenticated… Read More "Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN"
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
A critical vulnerability in the Bricksforge WordPress plugin is being exploited in the wild, according to WordPress security company Patchstack. The vulnerability is tracked as CVE-2026-85097 and it has a CVSS score of 9.8. Unauthenticated attackers can exploit it to… Read More "Bricksforge WordPress Plugin Vulnerability Exploited in the Wild"
Critical SonicWall Vulnerability Exploited Days After Disclosure
Threat actors started exploiting a recently patched critical vulnerability in SonicWall SMA1000 appliances within days after public disclosure. Tracked as CVE-2026-102255 (CVSS score of 10), the security defect is described as a pre-authenticated server-side request forgery (SSRF) issue affecting the… Read More "Critical SonicWall Vulnerability Exploited Days After Disclosure"