Vulnerabilities

The advisory is intended to help network defenders identify and respond to the group's malicious activity.

Atlassian rates CVE-2026-21589 Critical at 9.3. The flaw exposes files in Confluence and other Data Center tools; patches and stopgaps...

The operation's internal workflow came to light after the threat actors unintentionally exposed their own backend server.

Google froze its OSS VRP vulnerability search program on October 1, 2026, after a surge of invalid AI reports. An...

In this weekly roundup: Renfe's data breach, Australia's hijacked AI key warning, Polish patient data theft, MSP360 phishing, and Europol's...

A flaw in OpenSSL's DTLS retransmission logic, tracked as CVE-2026-84782, may expose heap memory to remote peers. Patches cover versions...

Apple has fixed CVE-2026-86950, an out-of-bounds write flaw in its CoreGraphics, with iOS 26.7.1 and iPadOS 26.7.1, released on September...

Two critical NetScaler RCE flaws, CVE-2026-88771 and CVE-2026-88772, were exploited before patches existed. Citrix urges all customers to update now.

Kiteworks has not reported a confirmed breach connected to the threat intelligence that triggered the advisory.

This weekly roundup covers a bold FBI breach claim, North Korea's fake-recruiter malware, the EU KIDS Act, a brief Discord...