Application securityCISA advises orgs to patch PHP2Shell bugs immediatelySteve ZurierOctober 21, 2026CISA urges immediate PHP2Shell patching as attackers target critical flaws in widely used PHP code.
MalwareSiemens Software Center flaw exploited in ClickFix DLL-sideloading attackSteve ZurierOctober 20, 2026Malware lets attackers gain the Siemens app with full privileges into industrial enterprises.
IdentityAttackers compromise Microsoft 365 credential via ConnectWise Cloud BackupSteve ZurierOctober 19, 2026Stolen ConnectWise app credential enables unauthorized access to hundreds of Microsoft 365 tenants.
Vulnerability ManagementBeyondTrust zero-day exploited by China-linked group Armory CastleSteve ZurierOctober 16, 2026Chinese group tied to at least three other major exploits over the past few weeks.
Email securityCisco warns critical Secure Email Gateway bug exploited in the wildSteve ZurierOctober 15, 2026Cisco confirms active exploitation of critical email gateway flaw, warns attackers can erase evidence.
Vulnerability ManagementCISA adds chained Ivanti Connect Secure bug to its exploited listSteve ZurierOctober 14, 2026CISA orders urgent patching of exploited Ivanti VPN flaw as attackers chain three vulnerabilities.
Vulnerability ManagementGitLab patches 10.0 flaw in its CE and EE productsSteve ZurierOctober 13, 2026GitLab patches critical CVSS 10.0 RCE flaw as experts warn of software supply chain risks.
Application securityCritical Bricksforge WordPress flaw exploited in attacksSteve ZurierOctober 12, 2026Attackers exploit critical Bricksforge WordPress flaw to execute code without authentication.
Vulnerability ManagementSonicWall SSRF bug rated 10.0 exploited in SMA1000 Appliance Work PlaceSteve ZurierOctober 9, 2026Attackers target critical SonicWall SMA1000 flaw as security experts urge immediate patching.
Network SecurityFour US states allege TP-Link defrauded customers, seek damagesSteve ZurierOctober 8, 2026Four states sue TP-Link over alleged security misrepresentations and ties to China.
