CISA
BreakingZammad GmbH Zammad flaw CVE-2026-102489 is being actively exploited, CISA warns
CISA added the Zammad GmbH Zammad vulnerability to its Known Exploited Vulnerabilities catalog on October 2, 2026, with a federal remediation deadline of October 5, 2026.
CISA
BreakingFortinet FortiMail flaw CVE-2026-104286 is being actively exploited, CISA warns
CISA added the Fortinet FortiMail vulnerability to its Known Exploited Vulnerabilities catalog on October 1, 2026, with a federal remediation deadline of October 4, 2026.
CISA
BreakingCISA flags data exposure flaw in Johnson Controls EasyIO Neo
CISA says CVE-2026-64892 could let an attacker obtain sensitive information from building automation controllers used worldwide, with fixed firmware now available.
CISA
BreakingCisco Catalyst SD-WAN Manager flaw CVE-2026-76504 is being actively exploited, CISA warns
CISA added the Cisco Catalyst SD-WAN Manager vulnerability to its Known Exploited Vulnerabilities catalog on September 30, 2026, with a federal remediation deadline of October 3, 2026.
CISA
Microsoft says Star Blizzard uses RedFlick to deploy CosmicPulse
Microsoft says the Russian state actor shifted to mass phishing and a one-click malware delivery technique, affecting more than 100 organizations, mostly in the US and UK.
Microsoft
CISA flags two high-severity flaws in Lantronix G520 gateways
Two vulnerabilities in the cellular gateway's update mechanism could let attackers run code with root privileges, CISA said, with fixed firmware available from Lantronix.
CISA
CISA lists nine Anjvision YSSD-RTMP-H5 flaws with no fix planned
CISA says the worst of the nine vulnerabilities scores 9.8 and could give an attacker full control of the device, and that the vendor has not responded.
CISA
BreakingApple Multiple Products flaw CVE-2026-86950 is being actively exploited, CISA warns
CISA added the Apple Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on September 29, 2026, with a federal remediation deadline of October 2, 2026.
CISA
BreakingMikroTik RouterOS flaw CVE-2026-67279 is being actively exploited, CISA warns
CISA added the MikroTik RouterOS vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
CISA
BreakingMicrosoft SharePoint flaw CVE-2026-65660 is being actively exploited, CISA warns
CISA added the Microsoft SharePoint vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
CISA