Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
October 15, 2026
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such
News
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Cisco confirms attackers are exploiting CVE-2026-76519, a CVSS 9.8 Secure Email Gateway flaw that gives root access, the second such zero-day since September.
Palo Alto Patches PAN-OS RCE Zero-Day CVE-2026-0322 Under Attack
Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE giving root access that is under limited exploitation, and CISA added it to KEV.
Microsoft Seizes Domains of Chinese Phishing Kits Behind 1B Messages
Microsoft, Health-ISAC and partners seized domains tied to the CoGUI, Haozi and Iron Man phishing kits and YAM Store, linked to over a billion scam ...
Vercel Ships Next.js 16.4.1 Fixing Two Critical RCE Flaws
Vercel released Next.js 16.4.1 and 15.5.28 to fix two critical unauthenticated remote code execution flaws and a high-severity denial-of-service bug in apps.
North Macedonia Charges Alleged OLVX Marketplace Administrator
North Macedonia charged the alleged administrator of the OLVX cybercrime marketplace in the first FBI joint cyber operation with the country, officials said.
JPCERT/CC Warns SiteGuard WAF Flaw CVE-2026-106931 Is Exploited
JPCERT/CC warns attackers are exploiting CVE-2026-106931, an OS command injection in SiteGuard Server Edition WAF that grants root or SYSTEM privileges.
Ahsay Issues New AhsayCBS Hotfixes After Earlier Patches Failed
Ahsay released new AhsayCBS hotfixes after its August patches did not fully close CVE-2026-105133 and CVE-2026-105134, and CISA added both flaws to KEV.
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own security checks.
ICO Reprimands Met Police Over Unvetted Use of Auror Platform
The UK ICO reprimanded the Metropolitan Police and issued an enforcement notice after officers used the Auror retail crime platform without data checks.
Juniper, Dell, NLnet Labs and SonicWall Patch Critical Flaws
Juniper, Dell, NLnet Labs and SonicWall released fixes for critical Junos OS, Wyse Management Suite, NSD and NSM On-Prem flaws; no exploitation is reported.
Palo Alto Patches PAN-OS RCE Zero-Day CVE-2026-0322 Under Attack
October 15, 2026
Palo Alto Networks patched CVE-2026-0322, a PAN-OS management interface RCE giving root access that is under limited exploitation, and CISA
Microsoft Seizes Domains of Chinese Phishing Kits Behind 1B Messages
October 15, 2026
Microsoft, Health-ISAC and partners seized domains tied to the CoGUI, Haozi and Iron Man phishing kits and YAM Store, linked
Vercel Ships Next.js 16.4.1 Fixing Two Critical RCE Flaws
October 15, 2026
Vercel released Next.js 16.4.1 and 15.5.28 to fix two critical unauthenticated remote code execution flaws and a high-severity denial-of-service bug
North Macedonia Charges Alleged OLVX Marketplace Administrator
October 15, 2026
North Macedonia charged the alleged administrator of the OLVX cybercrime marketplace in the first FBI joint cyber operation with the
JPCERT/CC Warns SiteGuard WAF Flaw CVE-2026-106931 Is Exploited
October 15, 2026
JPCERT/CC warns attackers are exploiting CVE-2026-106931, an OS command injection in SiteGuard Server Edition WAF that grants root or SYSTEM
Ahsay Issues New AhsayCBS Hotfixes After Earlier Patches Failed
October 15, 2026
Ahsay released new AhsayCBS hotfixes after its August patches did not fully close CVE-2026-105133 and CVE-2026-105134, and CISA added both
Hirudo Android Trojan Replaces Banking Apps With Patched Copies
October 15, 2026
ThreatFabric details Hirudo, an Android banking trojan that uninstalls real banking apps and installs modified copies that disable their own
ICO Reprimands Met Police Over Unvetted Use of Auror Platform
October 15, 2026
The UK ICO reprimanded the Metropolitan Police and issued an enforcement notice after officers used the Auror retail crime platform
Juniper, Dell, NLnet Labs and SonicWall Patch Critical Flaws
October 15, 2026
Juniper, Dell, NLnet Labs and SonicWall released fixes for critical Junos OS, Wyse Management Suite, NSD and NSM On-Prem flaws;
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.