zero day

NordVPN 2-years plan with 70% off for only $3.49/mo (30 days risk-free. Not satisfied? Get your money back, no questions asked.)

cve | cybersecurity | Threat Intelligence | zero day

SiteGuard CVE-2026-106931: Exploited WAF Flaw Hands Attackers Root, and CISA’s Deadline Is Tomorrow
By

Attackers are exploiting a command injection flaw in SiteGuard Server Edition, a Japanese web application firewall that runs inside the web server. It turns a low-level foothold into root or SYSTEM. CISA wants it fixed by Friday, October 23. Save the diagnostic bundle before you patch.

Read More SiteGuard CVE-2026-106931: Exploited WAF Flaw Hands Attackers Root, and CISA’s Deadline Is Tomorrow
cybersecurity | Threat Intelligence | zero day

Broadcom WPS Zero-Day: Root Over Wi-Fi, No CVE, No Fix
By

A memory-corruption bug in Broadcom’s Wi-Fi Protected Setup code lets anyone within radio range run code as root on affected routers and gateways, with no password. Broadcom will not assign a CVE, older eCos chips have no fix, and the researcher estimates millions of devices are exposed.

Read More Broadcom WPS Zero-Day: Root Over Wi-Fi, No CVE, No Fix
cve | cybersecurity | Threat Intelligence | zero day

BeyondTrust CVE-2026-102764: China-Nexus Zero-Day Hits Remote Support
By

A suspected China-nexus group exploited BeyondTrust Remote Support zero-day CVE-2026-102764. Apply BT26-05-RS, hunt for persistence and rotate brokered credentials after containment.

Read More BeyondTrust CVE-2026-102764: China-Nexus Zero-Day Hits Remote Support
cve | cybersecurity | Threat Intelligence | zero day

CISA KEV Weekly Roundup: 7 Exploited Flaws, 3 Deadlines
By

Seven exploited vulnerabilities entered CISA KEV this week. Review the October 16–18 federal deadlines, affected products, fixed versions and the compromise checks security leaders should require.

Read More CISA KEV Weekly Roundup: 7 Exploited Flaws, 3 Deadlines
cve | cybersecurity | Threat Intelligence | zero day

Cisco Email Gateway CVE-2026-76519: One Email, Root Access
By

Cisco Secure Email Gateway zero-day CVE-2026-76519 lets one crafted attachment give attackers root. CISA’s deadline is October 17. Update Content Scanner Tools, then check for compromise.

Read More Cisco Email Gateway CVE-2026-76519: One Email, Root Access
cve | cybersecurity | Threat Intelligence | zero day

CVE-2026-104935: Ivanti Zero-Day Needs a Hunt
By

Ivanti Connect Secure zero-day CVE-2026-104935 is exploited and on CISA KEV with an October 16 deadline. Patch now, then investigate: the attack chain hides from Ivanti’s own Integrity Checker.

Read More CVE-2026-104935: Ivanti Zero-Day Needs a Hunt
cve | cybersecurity | Threat Intelligence | zero day

The FortiMail Zero-Day Finally Has a Fix. Fortinet’s Own Logs Show Attackers Pointed the Mail Archive at Their Server, and Patching Won’t Undo It.
By

Fortinet now lists fixed FortiMail builds for exploited CVE-2026-104286. Its log indicators show a rogue archive account sending data to attacker infrastructure, a change that survives the upgrade.

Read More The FortiMail Zero-Day Finally Has a Fix. Fortinet’s Own Logs Show Attackers Pointed the Mail Archive at Their Server, and Patching Won’t Undo It.
cve | cybersecurity | Threat Intelligence | zero day

Patched Last Week, Crashing This Weekend: NetScaler Zero-Day CVE-2026-88779 Is Under Attack, and CISA Wants It Fixed by Wednesday
By

CVE-2026-88779 is an exploited Citrix NetScaler SAML flaw affecting appliances patched only days ago. Review fixed builds, CISA’s October 7 deadline, detection clues and prioritized CISO actions.

Read More Patched Last Week, Crashing This Weekend: NetScaler Zero-Day CVE-2026-88779 Is Under Attack, and CISA Wants It Fixed by Wednesday
cve | cybersecurity | Threat Intelligence | zero day

FortiMail CVE-2026-104286: Fixed Builds and Compromise Checks
By

Fortinet has released fixed builds for CVE-2026-104286. Upgrade FortiMail now, then check archive accounts, cron activity and files for evidence of compromise.

Read More FortiMail CVE-2026-104286: Fixed Builds and Compromise Checks
cve | cybersecurity | Threat Intelligence | Uncategorized | zero day

MikroTik Called It a Quiet Patch. CERT Polska Calls It “MikroTrick” — Full Admin Takeover With No Password and No Key, Exploited a Day Before the Fix Existed
By

🚨 CRITICAL VULNERABILITY ALERT — Network Edge / Remote Access Infrastructure: MikroTik shipped a silent, no-detail patch for RouterOS on September 3, 2026, hoping to buy administrators time before attackers reverse-engineered the flaw. CERT Polska has now confirmed the exploited chain — nicknamed MikroTrick — was already running in the wild since September 2, a full day before the patch existed…

Read More MikroTik Called It a Quiet Patch. CERT Polska Calls It “MikroTrick” — Full Admin Takeover With No Password and No Key, Exploited a Day Before the Fix Existed