Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
Broadcom has released urgent security updates to fix a critical integer overflow vulnerability (CVE-2026-59346) in VMware Workstation and Fusion. This flaw, which has a CVSS score of 9.3, resides in the VMXNET3 virtual network adapter. An attacker with local administrative privileges on the virtual machine can exploit this flaw to execute arbitrary code on the underlying host system. No temporary…
Read the article →
Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)
Attackers are actively exploiting a chain of vulnerabilities known as 'MikroTrick' in MikroTik RouterOS routers with the SSH service exposed to the Internet. CERT Polska and expert Costin Raiu revealed that the attacks combine…
Read the article →
N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)
N-able has urgently released the fourth hotfix in five weeks for its N-central remote monitoring and management (RMM) platform. The update fixes vulnerability CVE-2026-86218, rated with the maximum severity score (CVSS 10.0), which allows…
Read the article →
Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed
Microsoft set a new historic record by releasing fixes for as many as 973 vulnerabilities in the September 2026 Patch Tuesday, far surpassing the previous record of 664 updates in July. Among the flaws…
Read the article →
Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed
Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues…
Read the article →
GitLab fixes CVSS 10 vulnerability already targeted by hostile scans
GitLab has released updates for several vulnerabilities in Community Edition and Enterprise Edition, including two critical flaws and six high-severity issues. The most urgent is CVE-2026-85706, a path traversal vulnerability with a CVSS score…
Read the article →
CISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency has added five vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog. Their inclusion confirms that the flaws are already being…
Read the article →
GitLab: Critical CVE-2026-85706 Vulnerability Exploited Within 24 Hours
GitLab has disclosed CVE-2026-85706, a path traversal vulnerability with a CVSS score of 10.0 in the repository commits API. An unauthenticated attacker can send a single specially crafted HTTP request to read arbitrary files…
Read the article →
Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges
Cisco has fixed CVE-2026-76461, a critical vulnerability in Secure Email Gateway's email parsing that is already being actively exploited. An unauthenticated remote attacker can send a specially crafted message containing SQL instructions, execute arbitrary…
Read the article →
Cisco Secure Email Gateway zero-day actively exploited with root privileges
Cisco has fixed CVE-2026-76461, a critical vulnerability with a CVSS score of 9.8 affecting Secure Email Gateway that is already being exploited in real-world attacks. The flaw stems from insufficient validation in AsyncOS email…
Read the article →
Zero-day in Check Point management servers exploited in targeted attacks
F5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV Catalog
An OpenAI agent bypassed the controls of an Australian healthcare portal
Theft of Over $351 Million from Bitget Attributed to North Korean Actors
CISA Reports Active Attacks Against Microsoft SharePoint and MikroTik RouterOS
Two critical Citrix NetScaler zero-days exploited before patches became available
Two Citrix NetScaler Zero-Days Exploited Globally
Exploitation of New Citrix NetScaler Zero-Days Becomes WidespreadZero-day in Check Point management servers exploited in targeted attacksF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogAn OpenAI agent bypassed the controls of an Australian healthcare portalTheft of Over $351 Million from Bitget Attributed to North Korean ActorsCISA Reports Active Attacks Against Microsoft SharePoint and MikroTik RouterOSTwo critical Citrix NetScaler zero-days exploited before patches became availableTwo Citrix NetScaler Zero-Days Exploited GloballyExploitation of New Citrix NetScaler Zero-Days Becomes Widespread- Citrix NetScaler zero-day exploited to gain root access
- Critical Zero-Day in Cisco Catalyst SD-WAN Manager Actively Exploited
- Critical FortiMail zero-day actively exploited and added to the KEV catalog
- New Attack Vector Against Citrix NetScaler After Initial Patches
- Citrix NetScaler zero-days exploited globally and new high-severity vulnerability
- Citrix NetScaler zero-day exploited to take SAML deployments offline
- A Critical Flaw Exposes Sensitive Files in Eight Atlassian Data Center Products
- FortiBleed Campaign Compromises Over 86,000 Fortinet Firewalls Globally