FortiBleed credential theft connected to INC and Lynx ransomware shows large-scale credential harvesting used for intrusions. Mitigations include credential hygiene and network segmentation.
Argo CD repo-server flaw enables unauthenticated code execution if reachable on the internal network, risking cluster compromise. There is no patch or CVE yet; mitigate with network segregation.
CVE-2026-8037 in Kemp LoadMaster allows pre-auth remote code execution. Update devices and validate configurations.
CVE-led SimpleHelp vulnerability exploited to deliver malware and harvest credentials. Patch or upgrade to mitigate.
Critical flaw in Oracle E-Business Suite Payments component being exploited in the wild. Apply latest patches and monitor payment workflows.
Active exploitation of the Microsoft Defender privilege escalation flaw CVE-2026-33825 is fueling ransomware campaigns. Patches available; prioritise rapid remediation.
Frontend script injection via a third-party vendor; user reimbursements underway.
Threat actors redirect audit logs and telemetry to attacker storage; tighten bucket controls.
VS Code extension flaws enable arbitrary code execution and cloud credential theft via malicious repos.
Windchill remote code execution CVE-2026-12569 exploited in the wild; patching and monitoring vital.
EU organizations and suppliers face rising ransomware pressure; strengthen vendor risk and incident response.
Curl patches a 25-year-old vulnerability, fixing 18 CVEs in a record release; update all curl-enabled products.
Chrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.
Zero-day CVE-2026-20245 was exploited for months before Cisco patching; rapid mitigation and monitoring recommended.
EU organizations and suppliers face rising ransomware pressure; strengthen vendor risk and incident response.
Curl patches a 25-year-old vulnerability, fixing 18 CVEs in a record release; update all curl-enabled products.
Chrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.
Zero-day CVE-2026-20245 was exploited for months before Cisco patching; rapid mitigation and monitoring recommended.
OAuth token theft in Klue supply chain enables access to Salesforce data; investigation ongoing.
Supply chain compromise injected backdoor code into official Pro plugin releases; warns on software supply chain risk.
Get these articles delivered to your inbox.
Subscribe free