Cisco Email Gateway Zero-Day Gives Attackers Root Access
Cisco has confirmed active exploitation of CVE-2026-76519, a critical Secure Email Gateway flaw triggered by crafted attachments. A corrected Content Scanner Tools package is available, but organizations must...
Palo Alto PAN-OS Zero-Day Exploited to Run Code as Root
Palo Alto Networks says attackers have begun exploiting CVE-2026-0322, a PAN-OS management-interface flaw that enables root-level code execution. Administrators should install a fixed release immediately and investigate access...
Docker Hub Token Transfer Flaw Exposed Trusted Images to Impersonation Risk
Docker fixed CVE-2026-105445, a critical token-ownership flaw that could make an attacker's personal access token authenticate as another user after account conversion. Docker found no evidence of abuse,...
Fortinet Warns of Critical FortiSandbox GUI Authentication Bypass
CVE-2026-107656 exposes affected FortiSandbox and FortiSandbox PaaS releases to remote authentication bypass through crafted HTTP requests. The CVSS 9.6 flaw can enable unauthorized commands, although Fortinet has reported...
Attackers Exploit Ivanti Connect Secure Zero-Day for Pre-Auth Command Execution
Ivanti says attackers exploited CVE-2026-104935 against a limited number of Connect Secure customers. The network-accessible authentication bypass can lead to arbitrary command execution without credentials or user interaction,...
Microsoft Patches Windows Shell Zero-Day Used to Evade Download Warnings
Microsoft has fixed CVE-2026-96951, an actively exploited Windows Shell flaw that can bypass Mark of the Web protections. Organizations should prioritize the October 2026 update while reinforcing controls...
Nearly 5,000 Danfoss-Linked Systems Found Exposed Online After Supermarket Refrigeration Attacks
A fresh scan has identified 4,980 internet-facing hosts referencing Danfoss equipment, with France alone accounting for more than half, days after attackers remotely triggered defrost cycles at French...
Cyberattack Disrupts IT Systems Behind Phase Eight, Hobbs, and Whistles in the UK
South Africa's The Foschini Group has confirmed a cyberattack disrupted IT systems supporting its UK fashion brands Phase Eight, Hobbs, and Whistles, with some online functions impaired and...