BeyondTrust patched a critical zero-day in Remote Support actively exploited since August 2024. Organizations using BeyondTrust RS face four months of potential unauthorized privileged access. Immediate patching and retrospective security analysis required.
Microsoft patched CVE-2026-96951, a zero-day in Windows Shell actively exploited to bypass Mark of the Web security controls. The CVSS 8.8 flaw affects all Windows versions and requires immediate patching as threat actors weaponized it before disclosure.
Budget Android devices ship with preinstalled Midnight Mimosa malware that exploits MediaTek chipsets to enable silent app installation, ad fraud, and residential proxy abuse. This firmware-level supply chain compromise affects multiple manufacturers and cannot be removed through standard…
CVE-2024-53704, a critical unauthenticated SSRF vulnerability in SonicWall SMA 1000 appliances, is under active exploitation. The maximum-severity flaw allows attackers to bypass access controls and potentially execute code. Immediate patching to version 12.4.3-02854 is required.
A four-hour DDoS attack on October 8, 2026 disrupted Canonical’s Ubuntu websites and security APIs, preventing access to vulnerability data and updates. This second major incident this year highlights critical dependency risks for security teams relying on single-source infrastructure.
NVIDIA patched CVE-2026-47483, allowing unauthenticated attackers to crash DCGM Exporter via resource exhaustion. The high-severity flaw threatens GPU monitoring for AI workloads. Organizations should apply patches immediately to protect critical infrastructure.
Nippon Columbia’s malware infection exposed 8.6M+ karaoke customer records including names, addresses, and contact details from Daiichi Kosho’s network. The incident demonstrates third-party risk in entertainment infrastructure and credential theft potential.
Canadian cybersecurity executive arrested for federal extortion linked to ShinyHunters’ FBI systems attack. The case highlights insider threat risks and the need for robust privileged access controls and behavioral monitoring in security programs.
AnyDesk Linux versions up to 8.0.2 contain a critical unauthenticated remote code execution vulnerability allowing root access without user interaction. Proof-of-concept exploit available. Immediate upgrade to version 8.0.3 required for all deployments.
US authorities disrupted Chinese state-sponsored hacking tools used in multi-year global espionage operations, as seven governments jointly warn of PRC intelligence activities targeting sensitive data. Organizations potentially compromised since 2021 should review security posture immediately.