Unit 42 reveals how CL-STA-0954 deploys PEERSTITCH malware after a FortiManager breach, using FortiOS PEERSTITCH malware to hijack firewalls.
Apply the DSA-2026-405 security update for Dell Wyse Management Suite to fix four XSS flaws, including critical bug CVE-2026-82158 (CVSS 9.0).
Apply the NLnet Labs NSD patch for 4 flaws, including CVE-2026-101341. Each NSD stack overwrite vulnerability risks remote command execution.
Patch two high-severity SonicWall NSM On-Prem vulnerabilities (CVE-2026-96540, CVE-2026-100232) allowing admin privilege escalation and OS command RCE.
Microsoft and Proofpoint executed a CoGUI phishing kit takedown, seizing domains from YAM Store and Iron Man after 1B scam messages hit 75,000 firms.
CERT/CC disclosed three DataElement Bisheng vulnerabilities (CVE-2026-96679, CVE-2026-96681, CVE-2026-100156) allowing unauthenticated admin takeover.
Attackers are exploiting CVE-2026-76519 (CVSS 9.8), a critical Cisco Secure Email Gateway vulnerability allowing root RCE via attachments. Patch right now.
Attackers are actively exploiting CVE-2026-0322, a high-severity Palo Alto PAN-OS RCE vulnerability in the management interface. Apply patches right now.
F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.
Attackers are exploiting CVE-2026-103671 in the wild, an EC-CUBE AmazonPay Plugin vulnerability that redirects shoppers to steal account credentials.
Download the Windows 11 KB5127648 update for versions 24H2, 25H2, and 26H2. This patch fixes AC-3 audio crashes, login black screens, and security flaws.
Users can now publish Google Play AI apps using a standard account. Discover how Google AI Studio and Gemini are transforming Android app development.
Microsoft officially announces Windows 11 24H2 EOL for Home and Pro editions. Learn why you must upgrade to 25H2 or 26H2 to maintain critical security.
Discover Google Gemini 4 Argon. Learn how this new AI model matches GPT-6 Astra in performance while offering lower API costs and Antigravity integration.
Technical details and PoC exploit code for CVE-2026-97229, a CVSS 10.0 GitLab RCE vulnerability exposing 25,766 hosts, are now public. Patch to 19.4.2 now.
A scam crackdown on West Africa scam centers by Meta, tech firms and police removed 3.7M accounts, led to 28 arrests and freed 117 victims.
Discover why the new Codex CLI daemon autostart feature is causing frustration among developers. Learn how this background process impacts system updates.
Discover the new Excel Copilot interactive canvas. Microsoft brings natural language reports, skill building, and advanced data cleaning to Microsoft 365.
Broadcom introduces VMware monthly security updates to quickly patch flaws discovered by AI. Discover the new HyperArmor add-on for advanced virtual patching.
The Binance Pool shutdown arrives November 10, ending cloud mining and transaction acceleration. See what miners must do before then.
Discover the new Firefox Enterprise edition. Mozilla introduces a powerful management console to enhance corporate security, governance, and AI control.