Latest Newsroom publisher

Vulnerabilities in GNU Aspell software

Vulnerabilities in GNU Aspell software CVE ID CVE-2026-75818 Publication date 06 October 2026 Vendor GNU Product Aspell Vulnerable versions All before 0.60.8.3 Vulnerability type (CWE) Heap-based buff ... Read more

Published Date: Oct 06, 2026 (2 days, 23 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-75820 CVE-2026-75819 CVE-2026-75818

Kritiek lek in OpenOffice kan aanvaller controle over systeem geven

dinsdag 6 oktober 2026, 09:38 door Redactie, 1 reactiesLaatst bijgewerkt: Vandaag, 10:02 Een kritieke kwetsbaarheid in Apache OpenOffice kan een aanvaller controle over het systeem van gebruikers geve ... Read more

Published Date: Oct 06, 2026 (3 days, 3 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-59265

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory. T ... Read more

Published Date: Oct 06, 2026 (3 days, 3 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-21589 CVE-2026-88772 CVE-2021-26086

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau empl ... Read more

Published Date: Oct 06, 2026 (3 days, 1 hour ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-35273

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache. "Instead of downloading and executing remote payloads lik ... Read more

Published Date: Oct 06, 2026 (3 days, 3 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-6854

MCP for agent-to-agent comms may be the riskiest protocol you've never heard of

LOST IN TRANSLATION Trust gaps in the new protocol spread malicious prompts from one agent to another. Credit: Getty Images The adoption of AI agents in millions of organizations is creating new oppor ... Read more

Published Date: Oct 05, 2026 (3 days, 4 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-97228

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

4 Min ReadSource: Nikola Fific via ShutterstockResearchers have uncovered a new Linux malware strain that exploits a growing list of known vulnerabilities in Internet of Things (IoT) devices to mainta ... Read more

Published Date: Oct 05, 2026 (3 days, 5 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-87827 CVE-2026-36356 CVE-2021-36380 CVE-2014-8361

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulne ... Read more

Published Date: Oct 05, 2026 (3 days, 4 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-96940 CVE-2026-88772

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

A new Citrix NetScaler zero-day has moved quickly from discovery to active exploitation. CVE-2026-88779 affects NetScaler ADC and NetScaler Gateway deployments using SAML authentication and can cause ... Read more

Published Date: Oct 05, 2026 (3 days ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88779 CVE-2026-90970 CVE-2026-104286 CVE-2026-88772 CVE-2026-88771

Belgische overheidsinstantie Belnet gehackt via Fortinet-zerodaylek

De Belgische overheidsinstantie Belnet is eerder dit jaar gehackt via een zerodaylek in Fortinet FortiMail, waarbij aanvallers maandenlang e-mails wisten te stelen, zo heeft de organisatie via de eige ... Read more

Published Date: Oct 05, 2026 (3 days, 1 hour ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-104286

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were ... Read more

Published Date: Oct 05, 2026 (2 days, 22 hours ago)

Vulnerabilities has been mentioned in this article.

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling. "Cling ... Read more

Published Date: Oct 05, 2026 (3 days ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2025-34037 CVE-2024-3721 CVE-2023-41011 CVE-2023-26801 CVE-2016-20016 CVE-2021-35394 CVE-2016-10372 CVE-2014-8361

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial intelligence (AI) agents. "Some developers ... Read more

Published Date: Oct 05, 2026 (2 days, 9 hours ago)

Vulnerabilities has been mentioned in this article.

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), ... Read more

Published Date: Oct 05, 2026 (2 days, 10 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-61500 CVE-2024-23692

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tr ... Read more

Published Date: Oct 05, 2026 (2 days, 11 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88779 CVE-2026-88772 CVE-2026-88771

Microsoft verwacht misbruik van Exchange-lek dat toegang tot mailboxes geeft

Microsoft verwacht dat aanvallers misbruik zullen gaan maken van een nieuwe kwetsbaarheid in Exchange Server waarvoor afgelopen vrijdag 2 oktober updates verschenen. Via het beveiligingslek kan een ge ... Read more

Published Date: Oct 04, 2026 (3 days, 2 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-96940

Citrix waarschuwt voor actief misbruik van nieuw beveiligingslek

Citrix waarschuwt klanten voor actief misbruik van een nieuw beveiligingslek in Citrix NetScaler ADC en Citrix NetScaler Gateway (CVE-2026-88779) dat tot een denial of service kan leiden. Herhaaldelij ... Read more

Published Date: Oct 04, 2026 (2 days, 22 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88779

CVE-2026-90970: Critical GitLab AI Gateway Vulnerability

October 3, 2026AI infrastructure is quickly becoming part of the enterprise attack surface, and CVE-2026-90970 is a good example of why.Zero-Day Vulnerability ReportsThe vulnerability affects GitLab A ... Read more

Published Date: Oct 03, 2026 (3 days, 20 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-90970 CVE-2026-104286 CVE-2026-76504

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portugues ... Read more

Published Date: Oct 03, 2026 (3 days, 7 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-1055

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the se ... Read more

Published Date: Oct 02, 2026 (4 days, 5 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-90970 CVE-2026-1868

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems. The vulne ... Read more

Published Date: Oct 02, 2026 (3 days, 23 hours ago)

Vulnerabilities has been mentioned in this article.

Cyber Brief 26-10 - September 2026

Cyber Brief (September 2026)October 2, 2026 - Version 1TLP:CLEARExecutive summaryWe analysed 358 open source reports for this Cyber Brief1.Relating to cyber policy and law enforcement, Dutch police ar ... Read more

Published Date: Oct 02, 2026 (3 days, 21 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-87491 CVE-2026-83549 CVE-2026-83548 CVE-2026-82329 CVE-2026-19490 CVE-2026-65660 CVE-2026-0768

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

5 Min ReadOn Sept. 24, threat detection firm GreyNoise Intelligence observed a single US-based IP address scanning for Citrix NetScaler installations and conducting remote code execution (RCE) attacks ... Read more

Published Date: Oct 02, 2026 (3 days, 19 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88778 CVE-2026-88772 CVE-2026-88771 CVE-2026-19490 CVE-2026-19489

SWIFT Banking & Government Middleware Enables RCE

5 Min ReadSource: years via Getty ImagesResearchers have discovered a critical vulnerability in a hardware authentication program used to access highly sensitive global government and financial system ... Read more

Published Date: Oct 02, 2026 (3 days, 20 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-18397

FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286

October 2, 2026Executive SummaryFortinet has confirmed active exploitation of a critical FortiMail zero-day, CVE-2026-104286. The vulnerability carries a CVSS score of 9.8 and can allow an unauthentic ... Read more

Published Date: Oct 02, 2026 (3 days, 20 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-104286 CVE-2026-76504

110 vulnerabilities fixed in Google Pixel devices | Kaspersky official blog

On September 15 this year, Google published details of patches for 110 vulnerabilities in its own Google Pixel smartphones. Among all the disclosed flaws, CVE-2026-58704 stands out the most, for it ap ... Read more

Published Date: Oct 02, 2026 (3 days, 19 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-58704 CVE-2025-55182

Finse organisaties gehackt via Citrix-lekken meldt Finse overheid

Meerdere organisaties in Finland zijn via kwetsbaarheden in Citrix NetScaler gehackt, zo heeft de Finse overheid gisterenavond bekendgemaakt. Om hoeveel organisaties het precies gaat en in welke secto ... Read more

Published Date: Oct 02, 2026 (3 days, 19 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-88771

Vulnerability in gotop software

Vulnerability in gotop software CVE ID CVE-2026-91784 Publication date 02 October 2026 Vendor cjbassi Product gotop Vulnerable versions 3.0.0 Vulnerability type (CWE) Improper neutralization of argume ... Read more

Published Date: Oct 02, 2026 (3 days, 21 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-91784

Fortinet waarschuwt voor actief misbruikt path traversal-lek in FortiMail

vrijdag 2 oktober 2026, 09:00 door Redactie, 0 reactiesLaatst bijgewerkt: Vandaag, 09:30 Fortinet waarschuwt klanten voor een actief misbruikt path traversal-lek in FortiMail. Er zijn updates uitgebra ... Read more

Published Date: Oct 02, 2026 (3 days, 17 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-104286

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, followi ... Read more

Published Date: Oct 02, 2026 (3 days, 18 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-104286 CVE-2026-76504 CVE-2026-88772 CVE-2026-88771 CVE-2026-94127 CVE-2026-93616 CVE-2026-93952 CVE-2026-85102

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system does a little more than people expect. A model ch ... Read more

Published Date: Oct 01, 2026 (4 days, 5 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-102490 CVE-2026-102489 CVE-2025-4632

CVE-2026-76504: Cisco SD-WAN Manager Zero-Day Exploited in Wild

October 1, 2026Executive SummaryCisco Catalyst SD-WAN Manager is dealing with a serious zero-day that is already being exploited in the wild.Hacking & CrackingTracked as CVE-2026-76504, the flaw allow ... Read more

Published Date: Oct 01, 2026 (4 days, 3 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-76504 CVE-2026-86950

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to in ... Read more

Published Date: Oct 01, 2026 (4 days, 3 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-1581

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities ... Read more

Published Date: Oct 01, 2026 (4 days, 5 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-76504

Zerodaylekken in ticketsysteem Zammad gebruikt bij hack van DIVD

Het Dutch Institute for Vulnerability Disclosure (DIVD) is onlangs gehackt via twee zerodaylekken in helpdesksoftware en ticketsysteem Zammad, zo heeft het zelf bekendgemaakt. Het Nationaal Cyber Secu ... Read more

Published Date: Oct 01, 2026 (4 days, 8 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-102490 CVE-2026-102489

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The ... Read more

Published Date: Oct 01, 2026 (4 days, 8 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-86950

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt theft of configur ... Read more

Published Date: Oct 01, 2026 (4 days, 9 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-88771

Attackers have been exploiting critical Zimbra flaw to steal emails

Hackers have been exploiting a critical vulnerability in the Zimbra Collaboration Suite in an attempt to obtain email backups and authentication credentials of vulnerable organzations, Microsoft has w ... Read more

Published Date: Sep 30, 2026 (4 days, 15 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-73570

How the Citrix NetScaler Zero-Days Are Actually Being Exploited

The story around the Citrix NetScaler zero-days has become much clearer over the last few days.Threat Intelligence PlatformInitially, we knew that CVE-2026-88771 and CVE-2026-88772 were being exploite ... Read more

Published Date: Sep 30, 2026 (4 days, 17 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-86950 CVE-2026-88772 CVE-2026-88771

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research t ... Read more

Published Date: Sep 30, 2026 (3 days, 23 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-73570

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The f ... Read more

Published Date: Sep 30, 2026 (3 days, 23 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-76504 CVE-2026-20262 CVE-2026-20245 CVE-2026-20182

Microsoft: Zimbra-mailservers kort na uitkomen van patch gehackt

Een kwetsbaarheid in Zimbra-mailservers is kort na het uitkomen van de patch op 20 juli misbruikt bij aanvallen aldus Microsoft. Het bestaan van de kwetsbaarheid werd pas ruim drie weken later op 13 a ... Read more

Published Date: Sep 30, 2026 (3 days, 1 hour ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-73570

Cisco waarschuwt voor misbruik van kritiek lek in Catalyst SD-WAN Manager

Cisco waarschuwt organisaties voor actief misbruik van een kritieke kwetsbaarheid in de Cisco Catalyst SD-WAN Manager en heeft vandaag beveiligingsupdates uitgebracht om het probleem te verhelpen. De ... Read more

Published Date: Sep 30, 2026 (3 days, 2 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-76504 CVE-2026-20262 CVE-2026-20245 CVE-2026-20133 CVE-2026-20128 CVE-2026-20127 CVE-2026-20122

OpenSSL dicht kwetsbaarheid waardoor heap memory kan lekken

De makers van OpenSSL hebben updates uitgebracht voor meerdere kwetsbaarheden in de software, waaronder een beveiligingslek waardoor gedeeltes heap memory kunnen lekken. De impact van dit probleem (CV ... Read more

Published Date: Sep 30, 2026 (2 days, 6 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-84782

TeamViewer adviseert gebruikers om update zo snel mogelijk te installeren

TeamViewer adviseert alle gebruikers om gisteren uitgebrachte beveiligingsupdates voor kwetsbaarheden in de software zo snel mogelijk te installeren. Het is pas de tweede keer dat het softwarebedrijf ... Read more

Published Date: Sep 30, 2026 (2 days, 7 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-92370

Staatssecretaris: Rijksoverheid mogelijk gehackt via Citrix-lekken

Meerdere Rijksoverheidspartijen zijn mogelijk gehackt via kwetsbaarheden in Citrix NetScaler, zo heeft staatssecretaris Van der Burg van Binnenlandse Zaken in een brief aan de Tweede Kamer laten weten ... Read more

Published Date: Sep 30, 2026 (2 days, 6 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-88771

Vulnerabilities in YunoHost-Apps sogo_yhn software

Vulnerabilities in YunoHost-Apps sogo_yhn software CVE ID CVE-2026-74864 Publication date 30 September 2026 Vendor YunoHost-Apps Product sogo_yhn Vulnerable versions All before 5.8.0~ynh9 Vulnerabilit ... Read more

Published Date: Sep 30, 2026 (2 days, 7 hours ago)

Vulnerabilities has been mentioned in this article.

'Citrix-beveiligingslek al sinds begin september misbruikt bij aanvallen'

Aanvallers maken al zeker sinds begin september misbruik van een kritieke kwetsbaarheid in Citrix NetScaler ADC en NetScaler Gateway waarvoor op 27 september beveiligingsupdates verschenen, zo meldt G ... Read more

Published Date: Sep 30, 2026 (2 days, 4 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-88771

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The acti ... Read more

Published Date: Sep 30, 2026 (2 days, 5 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-88771

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP tra ... Read more

Published Date: Sep 30, 2026 (2 days, 6 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-84783 CVE-2026-84782 CVE-2026-75806