Alert

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated release addresses critical and high-severity vulnerabilities, including flaws found through AI-assisted security testing. The company said customers should address internet-facing devices first. In an October 21 announcement, Fortinet Chief Information …

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run code from far away on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, and the team is pressing all PHP users to update …

Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate networks. In one case studied, attackers got into VMware management systems and took credentials from a domain controller’s virtual disk, evading the security tools in the virtual machine. Palo Alto …

The Indian Computer Emergency Response Team (CERT-In), which is the government’s cybersecurity arm, has issued a “critical” rated advisory after AI agents under research and evaluation reached the live systems of several Indian organisations and read confidential data, including personal information. In the advisory available on its official website CERT-In …

Zoom released four security updates on October 13, 2026, all addressing serious problems. Two Zoom Workplace issues let users gain higher access, while the other two can expose information due to weak certificate checks. Updating to Zoom Workplace 7.2.0 or newer fixes most of these issues. CVE CVSS (CVSSv3) Type …

Microsoft breaks its record to its patch history. The company patched record 1411 flaws and 3 zero day of its October 2026 Patch Tuesday. This Patch Tuesday addresses 70 “Critical” vulnerabilities, 57 of which are remote code execution, 11 are elevation of privileges, and 2 are spoofing. The approximate number …

There was a rise in scanning and remote code execution attempts on video surveillance devices in Ukraine from September 21 to October 1, 2026. Most work was on CVE-2021-36260, a serious command injection flaw in unpatched Hikvision products. The increase happened during Russian missile and drone strikes, but researchers have …

The FBI and U.S. Secret Service released a joint warning about cybersecurity. The warning said that the FortiBleed campaign is attacking Fortinet FortiGate firewalls and SSL VPN gateways around the world. The operation that stole credentials has affected over 86,644 devices in 194 countries, putting organizations at great risk if …

Atlassian has fixed CVE-2026-21589, a serious flaw in Atlassian Data Center with a score of 9.3. This bug allows an attacker without an account to read files from the web application root. It impacts all versions of eight self-managed products, like Jira, Confluence, and Bitbucket. Why It Matters Atlassian’s self-managed …

Citrix has put out emergency security updates for a NetScaler SAML flaw that hackers are using. Known as CVE-2026-88779, this issue affects customer-managed NetScaler ADC and NetScaler Gateway devices and can cause service shutdowns, blocking access to services that rely on these systems. The flaw has a CVSS v4.0 score …