1. A critical zero day vulnerability in Fortinet FortiMail tracked as CVE 2026 104286 is being actively exploited to allow unauthenticated arbitrary file writes (The Hacker News).
2. CISA has officially added the critical FortiMail CVE 2026 104286 to its Known Exploited Vulnerabilities catalog following reports of active attacks (The Hacker News).
3. The official Microsoft account on X was hijacked by attackers to promote a cryptocurrency pump and dump scheme (BleepingComputer).
4. Law enforcement agencies successfully disrupted the KillSec ransomware operation which is allegedly led by a 16 year old and has impacted 500 victims (Dark Reading).
5. Polish dental software provider FELG reported a data breach involving patient information and a subsequent ransom demand (Reddit).
6. Microsoft security researchers identified hackers actively exploiting a vulnerability in Zimbra software prior to official disclosure (Reddit).
7. CISA added a critical vulnerability in Cisco Catalyst SD WAN Manager to its list of actively exploited flaws (Reddit).
8. New malicious Linux implants have been discovered that mimic legitimate Asian mail security products to facilitate persistent backdoors (Dark Reading).
9. Google announced that Android 17 will restrict accessibility services to verified tools when Advanced Protection is enabled to prevent financial fraud (The Hacker News).
10. Security experts highlight that middleware vulnerabilities in SWIFT banking and government systems now enable remote code execution (Dark Reading).
11. Recent incidents involving Kiteworks and Citrix underscore the ongoing challenges organizations face when responding to zero day vulnerabilities (Dark Reading).
12. The 2026 Microsoft Digital Defense Report warns of shifting phishing tactics and a rapid 5.3 hour window for container exploitation (Reddit).
Be First to Comment