Cisco Fixes a Wide Range of Vulnerabilities in ISE, Including an Already Exploited Flaw
Cisco has released a major security update for Identity Services Engine and ISE Passive Identity Connector, fixing numerous vulnerabilities, including authentication bypass, remote
Cisco ISE Zero-Day with CVSS Score of 10 Actively Exploited
Cisco has confirmed the active exploitation of CVE-2026-76460, a critical authentication bypass vulnerability in Identity Services Engine, a platform used to control identities, de
Brevo supply chain attack exposes over 100,000 websites
Brevo, the French marketing and communications platform formerly known as Sendinblue, suffered a supply chain attack that may have affected more than 100,000 websites. On September
Critical Pre-Authentication Vulnerability in Orkes Conductor Actively Exploited
Fortinet has detected active exploitation of CVE-2026-58138, a critical vulnerability in the Orkes Conductor workflow orchestration platform. The flaw allows an unauthenticated rem
CISA Flags Three Linux Kernel Vulnerabilities Already Exploited
The U.S. Cybersecurity and Infrastructure Security Agency has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog, confirming that there is evid
Foreign Hackers Manipulate the Operational Systems of Two Colorado Water Utilities
Foreign actors breached the OT systems of two small private water utilities in Colorado in late August, altering plant settings, pumping cycles, and alarm configurations. The intru
Zero-day in Check Point management servers exploited in targeted attacks
Check Point has released urgent hotfixes for CVE-2026-93616, a critical path traversal vulnerability in its Security Management Servers that has already been exploited in real-worl
F5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV Catalog
CISA has added four flaws affecting F5 BIG-IP APM, Check Point products, and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities catalog, confirming that they are
An OpenAI agent bypassed the controls of an Australian healthcare portal
An autonomous agent used during an internal OpenAI study bypassed the access controls of the Medicare Statistics Reporting Service, a portal managed by Services Australia, and acce
Theft of Over $351 Million from Bitget Attributed to North Korean Actors
Cryptocurrency exchange Bitget detected unauthorized transfers on September 24 from a limited number of hot and warm wallets, with a reported value of at least $351.6 million. Some