CISA
BreakingMicrosoft Windows flaw CVE-2026-96951 is being actively exploited, CISA warns
CISA added the Microsoft Windows vulnerability to its Known Exploited Vulnerabilities catalog on October 13, 2026, with a federal remediation deadline of October 16, 2026.
CISA
BreakingIvanti Connect Secure flaw CVE-2026-104935 is being actively exploited, CISA warns
CISA added the Ivanti Connect Secure vulnerability to its Known Exploited Vulnerabilities catalog on October 13, 2026, with a federal remediation deadline of October 16, 2026.
CISA
CISA and Partners Warn of China-Based Firm Enabling Cyber Threats
A joint advisory warns that Integrity Technology Group enables actors to target critical infrastructure sectors globally.
CISA
ProFTPD flaw CVE-2015-3306 is being actively exploited, CISA warns
CISA added the ProFTPD vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA
Apache Struts flaw CVE-2016-3081 is being actively exploited, CISA warns
CISA added the Apache Struts vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA
ISC BIND flaw CVE-2015-5477 is being actively exploited, CISA warns
CISA added the ISC BIND vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA
BreakingONLYOFFICE Docs flaw CVE-2021-3199 is being actively exploited, CISA warns
CISA added the ONLYOFFICE Docs vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA
BreakingStrapi flaw CVE-2023-22894 is being actively exploited, CISA warns
CISA added the Strapi vulnerability to its Known Exploited Vulnerabilities catalog on October 8, 2026, with a federal remediation deadline of October 11, 2026.
CISA
BreakingSavannah lwIP SMTP Client Hit by Critical Buffer Overflow Flaw
CISA warns that a critical buffer overflow in Savannah lwIP SMTP client version 2.2.1 could allow remote code execution or device crashes.
CISA
BreakingCitrix NetScaler flaw CVE-2026-88779 is being actively exploited, CISA warns
CISA added the Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on October 4, 2026, with a federal remediation deadline of October 7, 2026.
CISA