“CISA”

CISA warns CVE-2026-85046 is actively exploited in the wild against Chromium-based browsers; update browsers and apply mitigations.

Unpatched TeamCity led to a breach exposing AWS credentials; immediate secret rotation and patching urged.

Rockwell Automation released advisories and patches for multiple vulnerabilities across RSLinx, FactoryTalk, and other industrial products.

Multiple zero-days in SonicWall SMA1000 appliances are being actively exploited, enabling unauthenticated RCE and potential network compromise.

Authentication bypass in JFrog Artifactory (CVE-2026-82329) is actively exploited to mint admin tokens and seize repositories.

SANS highlights 100+ US water system attacks, OWASP GenAI LLM Top 10, and ten CVEs added to CISA KEV catalog.

CISA added six actively exploited vulnerabilities to its KEV catalog affecting Microsoft, Linux, Red Hat and Citrix products.

CISA added a Microsoft SQL Server RCE (CVE-2019-1068) to KEV after observed exploitation allowing code execution under SQL Server service.

CISA mandates immediate patching of Citrix NetScaler (CVE-2026-8452) after active exploitation; federal agencies have an urgent deadline.

Australian authorities warn of active exploitation of a critical TeamCity flaw; customers urged to patch immediately.

Over 270 Zimbra servers compromised via CVE-2026-73570 RCE; CISA issued a rapid patch directive.

CISA says CVE-2026-21962 in Oracle WebLogic is actively exploited, enabling remote compromise; immediate patching recommended.

Medusa ransomware campaign now affects 500+ organizations and increasingly targets critical infrastructure sectors.

CISA ordered immediate patching of TrueConf Server vulnerabilities that are being actively abused to deploy malware.

FBI warns Medusa Ransomware affiliates breached over 500 critical infrastructure orgs via improved RaaS tactics and tools.

CISA warns threat actors are actively exploiting a critical MLflow flaw to steal cloud credentials and internal data.

Flashpoint reports infostealers exfiltrated 1.7 billion credentials in the first half of 2026, fueling account takeover risk.

CISA confirms ransomware groups are exploiting a high-severity Windows Task Host vulnerability previously flagged as actively exploited.