IdentityFortiBleed campaign still attacking Fortinet devices, US agencies warnSteve ZurierOctober 7, 2026FBI warns FortiBleed attackers remain active, turning stolen credentials into persistent access.
DevSecOpsCritical Atlassian flaw exposes files across eight productsSteve ZurierOctober 7, 2026Unauthenticated attackers could steal credentials and gain access to CI/CD systems.
Network SecurityNew Citrix Netscaler zero-day exploited just days after recent attacksSteve ZurierOctober 5, 2026Third exploited NetScaler flaw in a week signals attackers are moving faster than patch cycles.
Vulnerability ManagementFortinet FortiMail bug exploited in the wild, added to CISA KEV listSteve ZurierOctober 2, 2026Exploited FortiMail flaw lets attackers turn email security gateways into persistent footholds.
Vulnerability ManagementCisco Catalyst SD-WAN Manager flaw added to CISA’s exploit listSteve ZurierOctober 1, 2026CISA flags actively exploited Cisco SD-WAN Manager authentication bypass flaw.
MalwareFake Zoom installer delivers new CloudSyncD macOS backdoorLaura FrenchOctober 1, 2026The malware uses a unique Unicode-based method to hide the user’s password in a fake Zoom configuration file.
Malware2 new forms of malware exploited Citrix Netscaler devices one month before patchSteve ZurierSeptember 30, 2026Google report focuses on exploit of CVE-2026-88772, which executed lateral movement a month before a patch existed.
MalwareMalicious ChatGPT Custom GPTs lead to ClickFix attackLaura FrenchSeptember 30, 2026Instructions to visit a malicious website were delivered through the real ChatGPT site.
Training57% of security execs report challenges with onboarding entry-level staffSteve ZurierSeptember 29, 2026SkillBit survey says security teams struggle to find and train new staff as AI compresses the time they have to patch new bugs.
Threat IntelligenceShinyHunters targets Oracle PeopleSoft in new campaign amid FBI attack claimsLaura FrenchSeptember 29, 2026Google says ShinyHunters found a way to bypass WAF rules to reach vulnerable endpoints.
