Critical FortiMail Vulnerability Actively Targeted by Attackers
PremiumCritical FortiMail zero-day (CVE-2026-104286) is actively exploited enabling arbitrary file writes; urgent patching required.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Monday, October 5
Friday, October 2
Polish Invoicing Platform Breach Raises Security Concerns for Businesses
PremiumPolish online invoicing platform breached, exposing user, customer, and business partner data across accounts.
OpenAI Thwarts Unauthorized AI Reasoning Extraction Linked to Moonshot AI
PremiumOpenAI says it disrupted a distillation campaign attributed to Moonshot AI aimed at extracting protected model reasoning.
MetaMask Addresses Security Incident, Initiates Validator Exit
PremiumMetaMask reports ongoing infrastructure security incident prompting exit of affected Ethereum validators; no immediate wallet compromise reported.
Sophisticated Phishing Campaign Targets US C-Suite with Microsoft 365 and Remote Access Tools
PremiumC-Suite phishing campaign steals Microsoft 365 sessions then deploys RMM tools to establish remote access across US targets.
Apple Releases Critical Update for CoreGraphics Vulnerability
PremiumApple fixed CoreGraphics zero-day CVE-2026-86950 that was being exploited to compromise iOS devices via malicious content.
Critical Vulnerability in FortiMail Exploited in Zero-Day Attacks
PremiumFortinet warns of critical FortiMail zero-day CVE-2026-104286 actively exploited to execute unauthorized commands and code.
US Treasury Targets ATM Malware Mastermind and Network
PremiumUS Treasury blacklists a key ATM malware developer tied to Tren de Aragua's jackpotting and laundering network.
UK Academics Alerted About Potential Espionage Links to China
PremiumMI5 warns UK academics about contributions to China General Technology Research Institute tied to potential espionage concerns.
International Crackdown Disables KillSec Ransomware Group
PremiumInternational police seized KillSec leak site and data, secured 110TB, and identified an alleged teenage administrator.
Antino Backdoor Exploits Microsoft 365 for Stealthy Cyber Intrusions
PremiumAntino Windows backdoor uses Outlook and OneDrive for covert C2, enabling stealthy commands and data exfiltration.
Warlock Ransomware Targets Critical Sectors via SharePoint Vulnerabilities
PremiumWarlock (Longlegs/Storm-2603) exploits SharePoint vulnerabilities to deploy ransomware against water and telecom operators.
AI-Driven Hack Exploits Zammad Zero-Day Vulnerabilities in DIVD Breach
PremiumDIVD says chained Zammad zero-days enabled session hijack, RCE, and privilege escalation to root in its AI-driven breach.
Zimbra Users Urged to Update Amid Exploitation of Critical Vulnerability
PremiumCritical Zimbra OS command-injection CVE-2026-73570 exploited via crafted emails without user interaction before disclosure.
Pentagon Data Breach Compromises Millions of Military Records
PremiumBreached Pentagon HR system exposed personal data of nearly three million military personnel after months-long intrusion.
Cisco Catalyst SD-WAN Zero-Day Exploited, Urgent Patch Released
PremiumCritical Catalyst SD-WAN Manager zero-day allows attackers to escalate to admin privileges and is actively exploited.
Bitget Suffers Massive $387.5M Crypto Heist Due to Zero-Day Exploit
PremiumBitget attributes $387.5M crypto theft to a third-party zero-day in security tooling, per SlowMist findings.
Exploitation of Citrix NetScaler Vulnerability Leads to Security Breaches
PremiumThreat actors exploit Citrix NetScaler pre-auth flaws to drop web shells, create superusers, and steal configs.
Wednesday, September 30
Kiteworks Resolves Critical Vulnerability, Restores Customer Services
Kiteworks patched a critical vulnerability and lifted an advisory that had asked some customers to shut down systems.
MCP Python SDK Vulnerability Exposes OAuth Credentials to Malicious Servers
MCP Python SDK flaw leaked OAuth client secret, authorization code, and PKCE proof to attacker-controlled token endpoints.
Get these articles delivered to your inbox.
Subscribe free