Latest in Cybersecurity news
CVE-2026-104935: Ivanti Zero-Day Needs a Hunt
Ivanti Connect Secure zero-day CVE-2026-104935 is exploited and on CISA KEV with an October 16 deadl…
CVE-2026-97229: Patch GitLab’s CVSS 10 RCE Now
GitLab fixed CVE-2026-97229, a CVSS 10.0 flaw that may allow unauthenticated code execution on self-…
CVE-2026-107406: NetScaler SAML Fix Needs Another Fix
Citrix patched CVE-2026-107406, a CVSS 9.5 NetScaler SAML memory overflow. Builds that fixed last we…
ARTEX AI Attacks South Korean Banks: CISO Actions
CrowdStrike linked ARTEX and several AI models to confirmed intrusions at South Korean financial ins…
AhsayCBS Zero-Day Chain: Backup Servers Under Active Attack
Attackers are chaining two AhsayCBS flaws for SYSTEM-level code execution, webshells and cryptominin…
CISA KEV Alert: Five Legacy Flaws Exploited by China-Linked Actors
CISA added five legacy vulnerabilities exploited by China-linked actors to KEV, with an October 11 f…
FortiBleed FBI Advisory: Admin Lockouts and New IoCs
The FBI and Secret Service say FortiBleed remains active against FortiGate firewalls and SSL VPNs, w…
The FortiMail Zero-Day Finally Has a Fix. Fortinet’s Own Logs Show Attackers Pointed the Mail Archive at Their Server, and Patching Won’t Undo It.
Fortinet now lists fixed FortiMail builds for exploited CVE-2026-104286. Its log indicators show a r…
Rejetto HFS CVE-2026-61500: AI-Found RCE Now Under Attack
CVE-2026-61500 lets unauthenticated attackers forge Rejetto HFS administrator sessions and execute c…