U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
In early October, threat actors started exploiting CVE-2026-21589, a critical arbitrary file access flaw in Atlassian Data Center products. Affected products include...
Zero-Days & Critical Vulnerabilities
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
On September 27 2026 Citrix disclosed it with a CVSS v3.1 score of 9.8 allowing unauthenticated attackers to execute arbitrary commands on NetScaler ADC and Gateway...
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
The flaw is a remote code execution vulnerability in the PAN-OS management interface, tracked as CVE-2026-0322, with a CVSS score of 8.6, and attackers are actively...
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The China-nexus cyber espionage group Armory Castle, also known as UNC5221 or Warp Panda, exploited CVE-2026-102764 in late August 2026. The vulnerability has a CVSS...
Microsoft Patches More Than 1,400 Security Flaws
Today's update fixes more than 1,400 vulnerabilities in Windows and other software. This batch dwarfs September's record of nearly 1,000 fixes. One weakness is a zero...