News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the Zammad vulnerability CVE-2026-102489 to its catalog of actively exploited vulnerabilities. Combined with a second flaw, it could allow an attacker to gain root privileges.
Cloudflare: Increased error rate in Cloudflare CDN. The incident has been resolved.
Symantec has observed the continued deployment of Warlock ransomware through vulnerable on-premises Microsoft SharePoint servers. At least four victims include a water utility and a telecommunications provider.
Microsoft confirmed unauthorized access to the @Microsoft account on X. The attackers used it to share content from an account posing as Clippy.
The Microsoft Digital Defense Report 2026 describes observed attacks on identities, cloud environments, supply chains, and edge devices. The company also warns of AI’s growing role.
Critical vulnerability CVE-2026-104286 in FortiMail allows unauthenticated file writing. Fortinet confirmed its exploitation, and CISA added it to the KEV catalog.
The U.S. Department of the Treasury added eight people and two Mexican companies linked to attacks on ATMs to its sanctions list. Separately, it designated an alleged Tren de Aragua group official.
The unauthenticated CVE-2026-73570 flaw in Zimbra’s SNMP notifications allows command execution on vulnerable mail servers. A fix has been available since July.
Cisco has released fixes for CVE-2026-76504 in Catalyst SD-WAN Manager. The critical flaw allows remote, unauthenticated attackers to gain administrator privileges, and the vendor has confirmed active exploitation.
TeamViewer released updates for five vulnerabilities with a maximum CVSS score of 8.8. Full Client and Host versions before 15.82 for Windows, Linux and macOS are affected.