Resolved: Discord – Problems Connecting Voice Calls
Discord: Problems connecting voice calls. The incident has been resolved.
Category Cybersecurity
News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
Microsoft Analyzes BEC Campaign Impersonating Executives and Using ServiceNow Invoices
Microsoft detected more than one million fraudulent emails impersonating company executives and ServiceNow communications. Indicators suggest possible use of generative AI, but they are not definitive evidence.
CISA Adds Two MikroTik RouterOS Flaws to Known Exploited Vulnerabilities Catalog
CISA added CVE-2026-86060 and CVE-2026-67277 in MikroTik RouterOS to the KEV catalog. MikroTik has released fixed RouterOS versions and recommends restricting SSH access.
SAP Fixes Two Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
SAP released fixes for CVE-2026-44756 with a CVSS score of 10.0 and CVE-2026-58240 with a CVSS score of 9.8. According to Onapsis, both vulnerabilities can be exploited remotely without authentication.
Cisco Confirms Exploitation of Critical CVE-2026-20079 Flaw in Firewall Management Center
Cisco has confirmed active exploitation of the critical CVE-2026-20079 flaw in Secure Firewall Management Center. An unauthenticated attacker can execute commands with root privileges.
DeepSeek Harness Sandbox: CVE-2026-82533 Bypassed Sandbox Restrictions
CVE-2026-82533 in DeepSeek Harness allowed an AI agent to disable file sandbox restrictions through a local API. Fixed versions are available.
Google Fixes Actively Exploited V8 Vulnerability in Chrome 153
Chrome 153 fixes CVE-2026-87491 in V8, which Google knows is being exploited in the wild. Desktop users should update their browser.
CISA Adds Critical N-able N-central Flaw to KEV; Hotfix 4 Available
CISA added CVE-2026-86218 in the N-able N-central platform to its catalog of actively exploited vulnerabilities. Hotfix 4 is available for on-premises deployments.
CISA Tracks Two Actively Exploited Windows Vulnerabilities After Microsoft’s September Patches
Microsoft released its September security updates, including KB5122878 for Windows 10. CISA also added two Windows vulnerabilities to its Known Exploited Vulnerabilities catalog.
Flaws in FreeIPA and 389 Directory Server Enable Anonymous LDAP Attack
Chaining two vulnerabilities may allow an anonymous attacker on default FreeIPA deployments to create a Kerberos principal of their choice and gain a path to privileged credentials.