Ivanti fixes actively exploited vulnerability in Connect Secure
Ivanti released fixes for CVE-2026-104935 in Connect Secure after confirming limited exploitation. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog.
Tag cybersecurity
Ahold Delhaize Disconnects Some Systems as a Precaution After Security Incident
Ahold Delhaize confirmed a security issue in its network. The company shut down some systems as a precaution, while stores remained open, according to the company.
Ledger Confirms Implant in Hardware Wallet Sold Through CryptoBilis
Ledger confirmed an unauthorized hardware implant in a device sold by reseller CryptoBilis. The module was reportedly designed to capture the recovery phrase from the screen during initial setup and send it via LTE.
Cyberattack Disrupted Cooling Systems at French Supermarkets
A cyberattack on cooling systems affected several French retail chains. The investigation covers the extent of the damage and how the intrusion occurred.
Critical CVE-2026-85097 vulnerability in Bricksforge for WordPress actively exploited
A vulnerability in the Bricksforge plugin allows unauthenticated attackers to upload a file and execute PHP code on the server. Patchstack has recorded exploitation attempts and recommends updating immediately.
GitLab Fixes Critical CVE-2026-97229 Flaw Rated CVSS 10
GitLab has released fixes for the critical CVE-2026-97229 flaw, which could allow unauthenticated remote code execution on unpatched self-managed instances.
HashiCorp Ends Boundary Community Edition Development, Archives Repository
HashiCorp has stopped developing Boundary Community Edition. The project will no longer receive new releases, bug fixes, or security patches.
Anthropic Temporarily Disables Live Internet for Internal Claude Evaluations
Anthropic is temporarily disabling live internet access in all internal evaluations after cases in which Claude unintentionally took actions on real websites.
Three Remote Attacks on Pixel 10 Succeed at Pwn2Own Ireland
Three teams at Pwn2Own Ireland successfully compromised fully updated Google Pixel 10 devices remotely. ZDI has not yet released technical details or a timeline for fixes.
Japan Extradites Russian Qilin-Linked Suspect to Germany
Japan’s police confirmed the detention of a Russian citizen under a German arrest warrant and his extradition to Germany. German authorities link him to the Qilin ransomware group.