France Attributes Refrigeration System Attacks to Iran
France has attributed the October 11 and 12 attacks against the refrigeration systems of approximately 700 sites to the Shahid Kaveh unit, which is linked to the cyber center of Iran’s Islamic Revolutionary Guard Corps. The attackers remotely altered temperatures, forcing some supermarkets to discard perishable products and causing fires at several facilities. According to French authorities, the attribution is…
Read the article →
OpenSSH “SSHole” flaw exploited within hours of disclosure
Threat actors began exploiting CVE-2026-123158, dubbed SSHole, within hours of its public disclosure, even obtaining root privileges on a honeypot monitored by Previdian. The vulnerability allows remote access to certain accounts that administrators believed…
Read the article →
Binance Reconstructs the Theft of Over $6.3 Billion
Binance attributed the theft of approximately $6.3–$6.4 billion to a months-long campaign that began with fake job interviews targeting two engineers. The attackers allegedly combined social engineering, a tampered Homebrew installation, malware, stolen credentials,…
Read the article →
Theft of Over $351 Million from Bitget Attributed to North Korean Actors
Cryptocurrency exchange Bitget detected unauthorized transfers on September 24 from a limited number of hot and warm wallets, with a reported value of at least $351.6 million. Some sources initially estimated the losses at…
Read the article →
Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed
Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues…
Read the article →
Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges
Cisco has fixed CVE-2026-76461, a critical vulnerability in Secure Email Gateway's email parsing that is already being actively exploited. An unauthenticated remote attacker can send a specially crafted message containing SQL instructions, execute arbitrary…
Read the article →
CISA Reports Active Attacks Against Microsoft SharePoint and MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency has added two flaws affecting Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog, confirming that they are being actively exploited. These include CVE-2026-65660, a…
Read the article →
Exploitation of New Citrix NetScaler Zero-Days Becomes Widespread
Two serious vulnerabilities in Citrix NetScaler ADC and Gateway products are creating an emergency for organizations that expose these devices to the Internet. CVE-2026-88771, which can be exploited remotely in vulnerable default configurations, was…
Read the article →
Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)
Attackers are actively exploiting a chain of vulnerabilities known as 'MikroTrick' in MikroTik RouterOS routers with the SSH service exposed to the Internet. CERT Polska and expert Costin Raiu revealed that the attacks combine…
Read the article →
N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)
N-able has urgently released the fourth hotfix in five weeks for its N-central remote monitoring and management (RMM) platform. The update fixes vulnerability CVE-2026-86218, rated with the maximum severity score (CVSS 10.0), which allows…
Read the article →
Critical Zero-Day in Cisco Catalyst SD-WAN Manager Actively Exploited
Critical FortiMail zero-day actively exploited and added to the KEV catalog
Critical Pre-Authentication Vulnerability in Orkes Conductor Actively Exploited
ARTEX automates secret discovery and is linked to breaches at seven South Korean financial institutions
An OpenAI agent bypassed the controls of an Australian healthcare portal
Brevo supply chain attack exposes over 100,000 websites
Foreign Hackers Manipulate the Operational Systems of Two Colorado Water Utilities
Critical VM-Escape Vulnerability Fixed in VMware Workstation and FusionCritical Zero-Day in Cisco Catalyst SD-WAN Manager Actively ExploitedCritical FortiMail zero-day actively exploited and added to the KEV catalogCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedARTEX automates secret discovery and is linked to breaches at seven South Korean financial institutionsAn OpenAI agent bypassed the controls of an Australian healthcare portalBrevo supply chain attack exposes over 100,000 websitesForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion- Cyber Sabotage Hits European Refrigeration Systems
- OpenSSH Fixes Critical Authentication Bypass on musl-Based Linux Systems
- Attacks on European Refrigeration Systems Reach French Blood Banks
- Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed
- GitLab fixes CVSS 10 vulnerability already targeted by hostile scans
- Cisco Secure Email Gateway zero-day actively exploited with root privileges
- Cisco Fixes a Wide Range of Vulnerabilities in ISE, Including an Already Exploited Flaw
- Two critical Citrix NetScaler zero-days exploited before patches became available