Categories
Cybersecurity News
Attackers exploit a critical Bricksforge WordPress plugin flaw that lets them take over websites
Attackers are exploiting a critical flaw (CVE-2026-85097) in the Bricksforge WordPress plugin that lets them run code on a website without logging in. It affects Bricks-built sites running Bricksforge up to version…
Cybersecurity News
Attackers try to exploit critical SonicWall SMA1000 flaw CVE-2026-102255 three days after the patch
Since 8 October, attackers have been trying to exploit CVE-2026-102255, a maximum-severity flaw (CVSS 10.0) in SonicWall SMA1000 6210, 7210 and 8200v remote access gateways. SonicWall patched it on 6 October. If you run…
Cybersecurity News
Flax Typhoon exploits eight flaws in common software, and Spain signs the joint advisory
Flax Typhoon, a China-linked group, is exploiting eight flaws in widely used software, and CISA added five to its KEV catalog on 8 October. Spain co-signs the joint advisory. It affects companies running their own…
Cybersecurity News
Attackers exploit two unpatched AhsayCBS flaws, and the latest version, 10.3.4, is still vulnerable
Attackers are exploiting two unpatched flaws in AhsayCBS, a backup management console popular with IT providers, to run code remotely. Even the latest version, 10.3.4, is affected. If an MSP or integrator handles your…
Cybersecurity News
FortiBleed is still active: FBI warns of attacks on FortiGate firewalls using stolen credentials
The FBI and the US Secret Service warn that FortiBleed is still active: attackers are getting into Fortinet FortiGate firewalls and SSL VPNs with stolen or reused credentials, sometimes locking administrators out. If…
Cybersecurity News
Attackers are exploiting critical CVE-2026-21589 in Jira and Confluence Data Center
Since 7 October, attackers have been trying to exploit CVE-2026-21589, a critical flaw that lets anyone read files without authentication in eight self-hosted Atlassian Data Center products, including Jira, Confluence…
Cybersecurity News
A malicious spreadsheet can run code in LibreOffice and OpenOffice; only LibreOffice has a patch
A malicious spreadsheet can run an attacker's code in LibreOffice and Apache OpenOffice as soon as it is opened, with no macro warning, if Java is enabled. It affects any company using these suites. Update LibreOffice…
Cybersecurity News
Warlock ransomware keeps breaching unpatched on-premises SharePoint and targets Spanish-speaking countries
Symantec warns that the Warlock ransomware group is still breaking into unpatched on-premises SharePoint servers and has hit organisations in Spanish- and Portuguese-speaking countries, including in Europe. If your…
Cybersecurity News
Fortinet warns of a critical FortiMail flaw exploited as a zero-day and still unpatched
Fortinet has confirmed attackers are already exploiting CVE-2026-104286, a critical FortiMail flaw that lets them write files to the system without authenticating. It affects the 7.2, 7.4, 7.6 and 8.0 branches, and the…
