SCKit Exploits ScreenConnect to Compromise MSPs and Technician Sessions
Microsoft has confirmed an active campaign, initially reported by ConnectWise on November 11, targeting cloud ScreenConnect instances belonging to managed service providers. Attackers use the legitimate remote support software to install clients connected to their own infrastructure and distribute the SCKit worm across customer-managed endpoints. The chain includes a batch launcher, a PowerShell decoder, and device-specific cryptographic material, while persistence…
Read the article →
Check Point gateways compromised through PHP2Shell chain and root privileges
Check Point has confirmed that since late October, some vulnerable Mobile Access Portals have been targeted through an exploit chain associated with CVE-2026-109618 and CVE-2026-109619. The initial operations, originating from the address 130.94.19[.]204, targeted…
Read the article →
Microsoft fixes over 1,200 flaws, including an already exploited Outlook vulnerability
Microsoft's November Patch Tuesday fixed more than 1,200 vulnerabilities, although sources report slightly different totals depending on whether third-party CVEs are included. The most urgent flaw is CVE-2026-124194 in Outlook, which has already been…
Read the article →
France Attributes Refrigeration System Attacks to Iran
France has attributed the October 11 and 12 attacks against the refrigeration systems of approximately 700 sites to the Shahid Kaveh unit, which is linked to the cyber center of Iran’s Islamic Revolutionary Guard…
Read the article →
ARTEX automates secret discovery and is linked to breaches at seven South Korean financial institutions
A Hunt.io investigation reconstructed the infrastructure of ARTEX, an open-source autonomous penetration testing framework developed in China, linking it to breaches at seven South Korean financial institutions that occurred between late September and early…
Read the article →
OpenSSH “SSHole” flaw exploited within hours of disclosure
Threat actors began exploiting CVE-2026-123158, dubbed SSHole, within hours of its public disclosure, even obtaining root privileges on a honeypot monitored by Previdian. The vulnerability allows remote access to certain accounts that administrators believed…
Read the article →
Binance Reconstructs the Theft of Over $6.3 Billion
Binance attributed the theft of approximately $6.3–$6.4 billion to a months-long campaign that began with fake job interviews targeting two engineers. The attackers allegedly combined social engineering, a tampered Homebrew installation, malware, stolen credentials,…
Read the article →
Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed
Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues…
Read the article →
Theft of Over $351 Million from Bitget Attributed to North Korean Actors
Cryptocurrency exchange Bitget detected unauthorized transfers on September 24 from a limited number of hot and warm wallets, with a reported value of at least $351.6 million. Some sources initially estimated the losses at…
Read the article →
Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges
Cisco has fixed CVE-2026-76461, a critical vulnerability in Secure Email Gateway's email parsing that is already being actively exploited. An unauthenticated remote attacker can send a specially crafted message containing SQL instructions, execute arbitrary…
Read the article →
GitLab: Critical CVE-2026-85706 Vulnerability Exploited Within 24 Hours
Cisco ISE Zero-Day with CVSS Score of 10 Actively Exploited
CISA Flags Three Linux Kernel Vulnerabilities Already Exploited
Zero-day in Check Point management servers exploited in targeted attacks
F5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV Catalog
Critical Pre-Authentication Vulnerability in Orkes Conductor Actively Exploited
An OpenAI agent bypassed the controls of an Australian healthcare portal
Foreign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesGitLab: Critical CVE-2026-85706 Vulnerability Exploited Within 24 HoursCisco ISE Zero-Day with CVSS Score of 10 Actively ExploitedCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedZero-day in Check Point management servers exploited in targeted attacksF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedAn OpenAI agent bypassed the controls of an Australian healthcare portalForeign Hackers Manipulate the Operational Systems of Two Colorado Water Utilities- Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
- November Patch Tuesday: Over 1,250 Vulnerabilities and an Exploited Outlook Zero-Day
- Cyber Sabotage Hits European Refrigeration Systems
- OpenSSH Fixes Critical Authentication Bypass on musl-Based Linux Systems
- Attacks on European Refrigeration Systems Reach French Blood Banks
- Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed
- GitLab fixes CVSS 10 vulnerability already targeted by hostile scans
- Cisco Secure Email Gateway zero-day actively exploited with root privileges