“Networks”

CVE-2026-8037 in Kemp LoadMaster allows pre-auth remote code execution. Update devices and validate configurations.

EU organizations and suppliers face rising ransomware pressure; strengthen vendor risk and incident response.

Zero-day CVE-2026-20245 was exploited for months before Cisco patching; rapid mitigation and monitoring recommended.

New directive requires prioritization of patching based on KEV risk; federal agencies must focus on the most dangerous, known exploited vulnerabilities.

Google Android patches address a exploited zero-day plus 123 other flaws; prioritize devices exposed to internet or corporate networks.

Active exploitation of PAN-OS auth bypass CVE-2026-0257. Exploit can enable remote access without authentication; prioritize patching and access control.

Coordinated disruption of Glassworm infrastructure; assess supply-chain risk and harden package sources.

High-severity RCE in Gogs; patch and rotate credentials; monitor exploit attempts and review access controls.

Law enforcement disrupted infrastructure enabling cyberattacks and disinformation; assess your hosting providers and monitor for abuse.

VPN seizure and supply-chain risk underscore need for stronger third-party controls.

Fortinet disclosed a critical remote code execution flaw in FortiSandbox (CVE-2026-26083) requiring urgent patching to prevent unauthenticated code execution. Prioritize affected deployments.

Initial access via social engineering on Teams; rapid persistence emphasis for defenders to harden collaboration tools and training.

Pan-OS users face an actively exploited zero-day; apply patches urgently to mitigate potential RCE and persistence risk.

New cPanel vulnerability exploited to target government and MSP networks. Patch immediately and audit exposure.

Two actively exploited SimpleHelp remote-support flaws pose direct access risks to networks.

State-sponsored actors chain CVEs to backdoor FXOS/ASA devices; FIRESTARTER persists after patches.

Zero-Day in Microsoft Defender exploited to access SAM and NTLM hashes; patch available. Review Windows security posture and apply the patch promptly.

SD-WAN vulnerabilities being exploited; patch cadence and network segmentation remain critical.

Legacy FTP exposure persists; organizations urged to decommission or secure gateways.