InfoSecBulletin Cybersecurity for mankind
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warn federal agencies to protect their Windows systems from a flaw used in zero-day attacks.
CVE-2026-32202 is a security issue found by the cybersecurity company Akamai. They say it is a zero-click NTLM hash leak problem that remains after Microsoft did not fully fix a remote code execution flaw (CVE-2026-21510) in February.
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
CERT-UA found that the Russian APT28 group, also known as UAC-0001 or Fancy Bear, used CVE-2026-21510 to attack Ukraine and EU countries in December 2025. This was part of a series of attacks that also took advantage of a flaw in LNK files (CVE-2026-21513).
Microsoft says that remote attackers who successfully exploit the CVE-2026-32202 vulnerability in low-complexity attacks by sending “the victim a malicious file that the victim would have to execute,” could “view some sensitive information” on unpatched systems.
Akamai said in a report on Thursday that this security problem can be used in pass-the-hash attacks to steal NTLM hashes (which are hashed passwords). These hashes let attackers pretend to be the user and move around the network or take sensitive information.
Feds ordered to patch by May 12
On Tuesday, CISA added CVE-2026-32202 to its list of known security issues. They told Federal Civilian Executive Branch (FCEB) agencies to fix their Windows computers and servers within two weeks, by May 12, as required by Binding Operational Directive (BOD) 22-01.
“This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise,” the cybersecurity agency warned.
“Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.”
To keep your system safe, security admins need to do the following:
- Apply all available mitigations and patches strictly in accordance with Microsoft’s official vendor instructions
- Review and follow the applicable BOD 22-01 guidance if your organization utilizes connected cloud services
- Discontinue the use of the affected product entirely if official mitigations are unavailable or cannot be deployed
- Monitor incoming network traffic logs for unusual spoofing attempts or suspicious authentication requests
- Patching your systems immediately is the single most effective defense against this actively exploited zero-day threat.
Delaying these important updates puts networks at risk of spoofing attacks and serious data breaches.
