Vulnerability ManagementCISA adds chained Ivanti Connect Secure bug to its exploited listSteve ZurierOctober 14, 2026CISA orders urgent patching of exploited Ivanti VPN flaw as attackers chain three vulnerabilities.
Vulnerability ManagementGitLab patches 10.0 flaw in its CE and EE productsSteve ZurierOctober 13, 2026GitLab patches critical CVSS 10.0 RCE flaw as experts warn of software supply chain risks.
Application securityCritical Bricksforge WordPress flaw exploited in attacksSteve ZurierOctober 12, 2026Attackers exploit critical Bricksforge WordPress flaw to execute code without authentication.
Vulnerability ManagementSonicWall SSRF bug rated 10.0 exploited in SMA1000 Appliance Work PlaceSteve ZurierOctober 9, 2026Attackers target critical SonicWall SMA1000 flaw as security experts urge immediate patching.
Network SecurityFour US states allege TP-Link defrauded customers, seek damagesSteve ZurierOctober 8, 2026Four states sue TP-Link over alleged security misrepresentations and ties to China.
IdentityFortiBleed campaign still attacking Fortinet devices, US agencies warnSteve ZurierOctober 7, 2026FBI warns FortiBleed attackers remain active, turning stolen credentials into persistent access.
DevSecOpsCritical Atlassian flaw exposes files across eight productsSteve ZurierOctober 7, 2026Unauthenticated attackers could steal credentials and gain access to CI/CD systems.
Network SecurityNew Citrix Netscaler zero-day exploited just days after recent attacksSteve ZurierOctober 5, 2026Third exploited NetScaler flaw in a week signals attackers are moving faster than patch cycles.
Vulnerability ManagementFortinet FortiMail bug exploited in the wild, added to CISA KEV listSteve ZurierOctober 2, 2026Exploited FortiMail flaw lets attackers turn email security gateways into persistent footholds.
Vulnerability ManagementCisco Catalyst SD-WAN Manager flaw added to CISA’s exploit listSteve ZurierOctober 1, 2026CISA flags actively exploited Cisco SD-WAN Manager authentication bypass flaw.
AI hits critical mass: Prepare for a budget reckoning and security staffing surgeNicole BeckwithOctober 13, 2026
