BeyondTrust warned customers on Thursday to fix a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. Remote Support is the company’s enterprise-wide support solution that helps IT service desks, help desks and customer support teams resolve issues remotely. Tracked as CVE-2026-102764actively exploited this Authentication bypass The … Read more
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited to attack firewalls. The vulnerability affects the PAN-OS management interface and allows authenticated attackers with network access to execute code as root on vulnerable devices. Palo Alto Networks confirmed in a safety notice announced on … Read more
According to WordPress security company Patchstack, a critical vulnerability is being exploited in the Bricksforge WordPress plugin. The vulnerability is tracked as CVE-2026-85097 and has a CVSS score of 9.8. Unauthenticated attackers can exploit it to upload arbitrary files and execute malicious code. This allows threat actors to gain full control over the targeted WordPress … Read more
Hackers have exploited two unpatched vulnerabilities in the AhsayCBS remote code execution (RCE) backup solution, cybersecurity firm Huntress warns. AhsayCBS is a centralized cloud backup server management console developed by Ahsay Systems. It offers backup policies, storage and user management and is popular with MSPs and system integrators. Tracked as CVE-2026-105133 And CVE-2026-105134The exploited vulnerabilities … Read more
Threat actors are exploiting a critical and a medium-severity vulnerability that remain unpatched in the backup management platform AhsayCBS to deploy webshells and cryptocurrency miners. AhsayCBS is typically used by managed service providers (MSPs) and system integrators. The malicious activity was observed on October 7 and targeted at least five organizations. The two security issues … Read more
Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two independent WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create fraudulent administrator accounts. Both vulnerabilities were given a high severity rating and require an authenticated session to be exploited. They are tracked as CVE-2026-93836, affecting WPC product bundles for … Read more
Citrix has released emergency updates for a new NetScaler denial of service vulnerability known as CVE-2026-88779, which has been exploited in zero-day attacks. Researchers are investigating whether it can also be exploited for remote code execution. The vulnerability is a memory buffer flaw that affects NetScaler ADC and NetScaler Gateway appliances that use SAML authentication … Read more
Fortinet is warning customers about a critical FortiMail vulnerability, CVE-2026-104286, which is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. The vulnerability is classified as critical with a CVSS score of 9.8 and affects the FortiMail administration interface. “A vulnerability related to improper restriction of a pathname to … Read more
Cisco on Wednesday deployed urgent patches for a critical authentication bypass in Catalyst SD-WAN Manager that has been exploited in the wild. The flaw, tracked as CVE-2026-76504 (CVSS score 9.8), impacts the session-based API authentication mechanism and could allow remote, unauthenticated attackers to gain administrative access to a vulnerable system. “In September 2026, the Cisco … Read more
A Microsoft SharePoint vulnerability known as CVE-2026-65660 is now being exploited for attacks, about six weeks after Microsoft announced patches and a few days after researchers disclosed technical details. CVE-2026-65660 is a remote code execution vulnerability that was addressed by Microsoft in the August 2026 Patch Tuesday updates. The company’s advisory describes it as a … Read more