Threat watch.
The latest cyberattacks and security alerts: reports from security newsrooms such as BleepingComputer, The Record and SecurityWeek, vulnerabilities that CISA has confirmed are being exploited, and alerts from DNSC (Romania), CERT-EU and the UK NCSC. The list updates every 15 minutes, and every item links to its source.
Last updated
Latest exploited vulnerability
CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.
Details in NVDICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
Russian travel booking platform suspends reservations after cyberattack
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
Congressional probe faults Match Group for failing to rein in dating app scams
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers
Chainguard Harness uses frontier AI to test running applications for vulnerabilities
ALERTĂ: Incident de securitate ce vizează vulnerabilități ale unor instalații frigorifice
Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Ransomware gets personal: 'We-know-where-you-are kind of stuff'
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
Microsoft Patches More Than 1,400 Security Flaws
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Cyberattacks crank French supermarket refrigeration systems up to 50°C
'123456' password linked to Denmark data breach affecting 8.8M people
CVE-2026-96951: Microsoft Windows Command Injection Vulnerability
Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Prominent Ransomware Negotiator Faces Extortion Charges
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
Retail giant Ahold Delhaize takes systems offline after cyberattack
GitLab warns of max severity code execution vulnerability
2026-016: Critical Vulnerability in GitLab CE and EE
Help the NCSC understand how organisations approach external attack surface risk
Imagine there's no Shiny Hunters – AI could make human hacking crews obsolete
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
Știrile săptămânii din cybersecurity (08.10.2026)
UK and Germany team up against Russian cyberattacks as Brexit rethink looms
CVE-2015-5477: ISC BIND Data Processing Errors Vulnerability
ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.
CVE-2016-3081: Apache Struts Command Injection Vulnerability
Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.
CVE-2023-22894: Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. This vulnerability can be chained with CVE-2023-226
CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability
ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.
CVE-2015-3306: ProFTPD Improper Access Control Vulnerability
ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.
ALERTĂ: Vulnerabilitate critică la nivelul Fortinet FortiMail
CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.
CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.
Știrile săptămânii din cybersecurity (01.10.2026)
CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability
Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.
COMUNICAT DE PRESĂ: Directoratul Național de Securitate Cibernetică (DNSC) aplică prima sancțiune contravențională pentru nerespectarea obligației de notificare prevăzute de OUG nr. 155/2024
CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
COMUNICAT DE PRESĂ: Agenda oficială a Bucharest Cybersecurity Conference 2026 a fost publicată
ALERTĂ: Vulnerabilități critice exploatate activ în Citrix NetScaler
Does an alert affect you?
Start with the vendor’s guidance. If you are not sure which of your systems are exposed, we can help you find out and set priorities.
Cybersecurity services