Advisories
Emerging Threat: ConnectWise Cloud Backup for Microsoft 365 Used to Access Customer Tenants
A security notice reports that attackers are using ConnectWise Cloud Backup for Microsoft 365 to reach customer tenants and steal email, SharePoint, and Teams data.
Oct 16, 2026 - 2 Min Read
Critical Vulnerability in BeyondTrust Remote Support Under Active Exploitation (CVE-2026-102764)
A suspected China-nexus espionage group exploited a critical flaw in BeyondTrust Remote Support as a zero-day, letting unauthenticated attackers write files to the appliance and take over the host.
Oct 15, 2026 - 6 Min Read
Critical Authentication Bypass in Juniper Junos OS J-Web (CVE-2026-101956, CVE-2026-101986)
Two critical J-Web authentication flaws in Juniper Junos OS and Junos OS Evolved let unauthenticated attackers run privileged commands on devices with J-Web exposed
Oct 14, 2026 - 5 Min Read
Critical Zero-Day in Cisco Secure Email Gateway Under Active Exploitation (CVE-2026-76519)
Cisco has confirmed active exploitation of a Secure Email Gateway flaw that gives an unauthenticated attacker root-level command execution through an email with a maliciously crafted attachment.
Oct 14, 2026 - 5 Min Read
High-Severity Authentication Bypass Vulnerability in Ivanti Connect Secure Under Active Exploitation (CVE-2026-104935)
An actively exploited zero-day in Ivanti Connect Secure lets unauthenticated attackers run commands on the VPN gateway. Attackers have chained it with a still unpatched flaw to gain root access and steal Active Directory secrets.
Oct 13, 2026 - 5 Min Read
Critical Remote Code Execution Vulnerability in AnyDesk for Linux (CVE-2026-109390)
A working public exploit for an AnyDesk for Linux flaw lets unauthenticated, remote attackers run commands as root before anyone approves a remote session.
Oct 13, 2026 - 3 Min Read
Critical Remote Code Execution Vulnerability in GitLab CE and EE (CVE-2026-97229)
A critical flaw in how GitLab compiles regular expressions in pipeline configurations lets an unauthenticated attacker execute arbitrary code on self-managed GitLab servers, putting source code and pipeline secrets at risk.
Oct 12, 2026 - 2 Min Read
Critical Remote Code Execution Vulnerability in Citrix NetScaler ADC and NetScaler Gateway (CVE-2026-107406)
Citrix has disclosed a critical memory overflow in SAML-enabled NetScaler ADC and NetScaler Gateway appliances that can lead to remote code execution, compounding security risks following weeks of zero-day exploitation targeting these appliances.
Oct 8, 2026 - 4 Min Read
Critical Arbitrary File Read Vulnerability in Atlassian Data Center Products (CVE-2026-21589)
A critical flaw in self-hosted Crowd, Jira, Confluence, Bitbucket, and five other Atlassian products lets unauthenticated attackers read files from the application web root.
Oct 6, 2026 - 4 Min Read
Critical Server-Side Request Forgery Vulnerability in SonicWall SMA1000 (CVE-2026-102255)
A pre-authentication server-side request forgery flaw in SonicWall SMA1000 remote access appliances lets an unauthenticated attacker make the appliance reach internal functionality and perform unauthorized operations.
Oct 6, 2026 - 4 Min Read