Symantec has observed the continued deployment of Warlock ransomware through vulnerable on-premises Microsoft SharePoint servers. At least four victims include a water utility and a telecommunications provider.
Microsoft confirmed unauthorized access to the @Microsoft account on X. The attackers used it to share content from an account posing as Clippy.
The Microsoft Digital Defense Report 2026 describes observed attacks on identities, cloud environments, supply chains, and edge devices. The company also warns of AI’s growing role.
Critical vulnerability CVE-2026-104286 in FortiMail allows unauthenticated file writing. Fortinet confirmed its exploitation, and CISA added it to the KEV catalog.
OpenAI said it disrupted coordinated activity aimed at obtaining protected internal reasoning traces from its models. The company denied any compromise of databases or access to users’ stored conversations.
The unauthenticated CVE-2026-73570 flaw in Zimbra’s SNMP notifications allows command execution on vulnerable mail servers. A fix has been available since July.
Google has introduced Gemini 4 Argon, with access limited to trusted cybersecurity defenders through the Fairwind program. The company is delaying broader release because of the risk of misuse of its advanced security capabilities.
Cisco has released fixes for CVE-2026-76504 in Catalyst SD-WAN Manager. The critical flaw allows remote, unauthenticated attackers to gain administrator privileges, and the vendor has confirmed active exploitation.
TeamViewer released updates for five vulnerabilities with a maximum CVSS score of 8.8. Full Client and Host versions before 15.82 for Windows, Linux and macOS are affected.
Glow Security says it found more than 13,000 screenshots from 343 organizations in public GitHub repositories. The case is not linked to a confirmed attack on GitHub, but to the public storage of outputs from tools used in development.