Security Intelligence
Patches pending for actively exploited FortiMail flaw
Fortinet disclosed active exploitation of CVE-2026-104286. At disclosure, patches were not available for affected...
Security Intelligence
SharePoint vulnerability actively exploited
CVE-2026-65660 is an actively exploited SharePoint flaw allowing an authenticated low-privileged user to execute code...
Security Intelligence
Cisco Catalyst SD-WAN Manager flaw exploited
Cisco disclosed CVE-2026-76504 on September 30, 2026, and confirmed the vulnerability has been exploited in the wild.
Security Intelligence
Star Blizzard scales phishing operations with RedFlick malware delivery
Russian threat actor Star Blizzard expanded phishing tactics with RedFlick malware, targeting organizations linked to...
Security Intelligence
Citrix patches two actively exploited NetScaler vulnerabilities
Citrix disclosed eight NetScaler vulnerabilities on September 27, 2026, including two actively exploited flaws that...
Security Intelligence
Roundcube Webmail SQL injection vulnerability exploited
Active exploitation has been reported for CVE-2026-48842, a high-severity SQL injection vulnerability affecting...
Security Intelligence
WordPress exploitation attempts observed hours after security update
Exploitation attempts targeting CVE-2026-87902 began within hours of the September 22 release of WordPress 7.1.2, with...
Security Intelligence
WordPress 7.1.1 fixes two paths to shell
WordPress 7.1.1 fixes 11 flaws, including Click2Shell and Comment2Shell which can be leveraged to execute...
Security Intelligence
F5 Fixes Actively Exploited BIG-IP APM Vulnerability
F5 patched an actively exploited BIG-IP APM vulnerability that lets attackers gain unauthenticated remote code...
Security Intelligence
Gyazo Breach Exposes User Data and Image Metadata Records
Exploitation of a Gyazo image upload server flaw exposed searchable OCR text from screenshots, raising risk for...
Security Intelligence
Critical extended Passport flaw impacts SAP systems
SAP patched a critical vulnerability in a widely used SAP request-tracing feature that researchers report can lead to...
Security Intelligence
Cisco patches actively exploited authentication bypass in ISE
An actively exploited authentication bypass vulnerability in Cisco ISE and ISE-PIC allows remote, unauthenticated...