1. Executive summary Ransomware crews tracked as Qilin and Inc are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS GlobalProtect portals
1. Executive summary A public proof-of-concept exploit has been released for CVE-2026-106173, a path traversal flaw in Fortinet FortiSIEM that an unauthenticated
1. Executive summary Attackers used a stolen credential belonging to the ConnectWise Cloud Backup application (formerly SkyKick) to authenticate as that application into customer Microsoft 365
1. Executive summary HMS Networks has fixed six vulnerabilities in its PEAK-System PCAN Windows CAN device drivers and the associated Device Driver Setup package, affecting
1. Executive summary Cisco Talos reports that Microsoft's monthly Patch Tuesday advisory count has risen from a pre-June average of about 100 to
1. Executive summary Terra Security reviewed every published CVE record and GitHub-reviewed advisory and found that the share of open-source fixes later reported incomplete
1. Executive summary Siemens has confirmed active exploitation of CVE-2026-110936, a DLL side-loading flaw in Siemens Software Center, which carries a CVSS v4.
1. Executive summary Between April and July 2026, an unknown cluster tracked as UNC7017 repeatedly altered configuration files on AOMEI's update and notification servers,
1. Executive summary On 1 November 2024 an intruder used a dormant test account, Test2, protected by the password "Password1" to enter the network
1. Executive summary The Laravel framework released security fixes on 19 October 2026 for multiple vulnerabilities affecting versions 12.68.x before 12.68.0 and
1. Executive summary The FCA's chief data, information and intelligence officer, Jessica Rusu, said on 20 October 2026 that firms' existing major-incident
1. Executive summary A survey of 700 IT and security decision-makers at organisations of 500 or more employees in the US, UK, France and Germany