Atlassian Warns of Critical File-Read Flaw Across Eight Data Center Products
Atlassian has disclosed CVE-2026-21589, a critical arbitrary-file-access vulnerability affecting eight self-hosted Data Center products. The vendor rated the issue 9.3 under CVSS v4.0. An unauthenticated attacker must know a target…
Malicious Custom GPTs Used in ClickFix Campaigns, Researchers Say
Researchers have reported a ClickFix campaign in which malicious Custom GPTs hosted on ChatGPT were used as part of a path to remote-access malware. The reported flow redirected victims to…
Citrix Fixes Critical NetScaler Flaws Reportedly Under Exploitation
Citrix has issued fixes for critical NetScaler ADC and Gateway vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772, according to current threat reporting. The report says attackers have used the flaws to…
Cisco Warns of Actively Exploited Catalyst SD-WAN Manager Flaw CVE-2026-76504
Cisco has warned of CVE-2026-76504, a critical Catalyst SD-WAN Manager vulnerability reported with a CVSS score of 9.8. The issue may allow an unauthenticated remote attacker to send crafted requests…
Microsoft Releases Out-of-Band Exchange Fix for CVE-2026-96940
Microsoft has released an out-of-band security update for CVE-2026-96940, a high-severity Exchange Server vulnerability that may allow an authenticated attacker to read another user’s email and attachments within the same…
WatchGuard Endpoint Driver Flaw CVE-2026-13043 Exposes Kernel and Process Memory
A reported critical flaw in the Panda Kernel Memory Access Driver used by WatchGuard and Panda endpoint products could let a local authenticated attacker bypass an intended driver-authentication control and…
Atlassian Issues Fixes for CVE-2026-21589 Affecting Jira and Confluence Data Center
Atlassian has issued fixes for CVE-2026-21589, a critical vulnerability affecting Jira Software Data Center and Confluence Data Center. The issue is described as unauthenticated access to specified files in affected…
Cling Malware Masquerades as Google STUN Traffic to Control IoT Devices
Researchers have reported on Cling malware, which targets vulnerable Realtek-based devices and disguises command-and-control traffic as Google STUN responses while building an IoT botnet. The reported behavior is a reminder…
Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity
The U.S. Senate has passed bipartisan legislation intended to strengthen healthcare cybersecurity, according to SecurityWeek reporting published October 5. The proposal responds to the sector’s continuing exposure to disruptive cyber…
Alleged ShinyHunters Leader Arrested in Jordan, SecurityWeek Reports
An individual believed to lead the ShinyHunters extortion group was reportedly arrested in Jordan and is cooperating with the FBI, according to SecurityWeek reporting published October 5. The report should…