Alert

The Indian Computer Emergency Response Team (CERT-In), which is the government’s cybersecurity arm, has issued a “critical” rated advisory after AI agents under research and evaluation reached the live systems of several Indian organisations and read confidential data, including personal information. In the advisory available on its official website CERT-In …

Zoom released four security updates on October 13, 2026, all addressing serious problems. Two Zoom Workplace issues let users gain higher access, while the other two can expose information due to weak certificate checks. Updating to Zoom Workplace 7.2.0 or newer fixes most of these issues. CVE CVSS (CVSSv3) Type …

Microsoft breaks its record to its patch history. The company patched record 1411 flaws and 3 zero day of its October 2026 Patch Tuesday. This Patch Tuesday addresses 70 “Critical” vulnerabilities, 57 of which are remote code execution, 11 are elevation of privileges, and 2 are spoofing. The approximate number …

There was a rise in scanning and remote code execution attempts on video surveillance devices in Ukraine from September 21 to October 1, 2026. Most work was on CVE-2021-36260, a serious command injection flaw in unpatched Hikvision products. The increase happened during Russian missile and drone strikes, but researchers have …

The FBI and U.S. Secret Service released a joint warning about cybersecurity. The warning said that the FortiBleed campaign is attacking Fortinet FortiGate firewalls and SSL VPN gateways around the world. The operation that stole credentials has affected over 86,644 devices in 194 countries, putting organizations at great risk if …

Atlassian has fixed CVE-2026-21589, a serious flaw in Atlassian Data Center with a score of 9.3. This bug allows an attacker without an account to read files from the web application root. It impacts all versions of eight self-managed products, like Jira, Confluence, and Bitbucket. Why It Matters Atlassian’s self-managed …

Citrix has put out emergency security updates for a NetScaler SAML flaw that hackers are using. Known as CVE-2026-88779, this issue affects customer-managed NetScaler ADC and NetScaler Gateway devices and can cause service shutdowns, blocking access to services that rely on these systems. The flaw has a CVSS v4.0 score …

CPanel has put out security updates to fix three problems in cPanel & WHM. These problems could let attackers take over WHM admin sessions or run commands as the root user. Organizations with affected systems should focus on upgrades. These problems impact all supported versions of cPanel & WHM before the …

Hackers to exploit a flaw in Zimbra mail servers that are connected to the Internet. They send special emails that allow them to run commands on a weak server without needing to log in or get an employee to open a message. The focus is on CVE-2026-73570, a command-injection vulnerability …

Google has said that hackers are using two serious Citrix NetScaler security holes to get root access, set up hidden web shells, and enter victims’ networks. The activity has impacted groups in North America and Europe. This includes government, finance, technology, education, law, and professional services. Mandiant Consulting and Google Threat …