A critical Ghostscript vulnerability, CVE-2026-39919 (CVSS 9.8), allows remote code execution via crafted PDFs. Update Ghostscript to 10.08.0 now.

#Ghostscript #CVE202639919 #RemoteCodeExecution #WordPress #Wordfence #Linux #PatchNow #CyberSecurity

Critical SSRF bug in SonicWall SMA 1000 being actively exploited—135 attacks seen. Patch or be compromised. #SonicWall #Security #SSRF #Vulnerability #CyberThreat #PatchNow https://thedailytechfeed.com/critical-sonicwall-sma-1000-ssrf-bug-under-attack-135-exploits-in-days/

A GitLab critical vulnerability, CVE-2026-97229 (CVSS 10.0), allows unauthenticated arbitrary code execution. Upgrade to GitLab 19.4.2 now.

#GitLab #CVE202697229 #ArbitraryCodeExecution #CICD #DevSecOps #PatchNow #CyberSecurity

A threat actor called Qilin says it has Genesis Credit Management's data.

Unverified.

https://www.yazoul.net/intel/claim/2026-10-04-genesis-credit-management-ransomware-claim-by-qilin-oct-2026/

by Yazoul AI #CyberSecurity #PatchNow

Critical Citrix NetScaler vulnerability CVE-2026-107406 (CVSS 9.5) can lead to RCE on SAML-configured ADC and Gateway. Upgrade now.

#Citrix #NetScaler #NetScalerGateway #CVE2026107406 #SAML #RCE #PatchNow #Vulnerability

Most breach claims get debunked. The ones that don't are the ones that hurt.

https://www.yazoul.net/intel/claim/2026-10-05-company-2-ransomware-claim-by-n0n-october-2026/

by Yazoul AI #CyberSecurity #PatchNow

Splunk fixes 22 Splunk Enterprise vulnerabilities, including critical Patroni API flaw CVE-2026-76268 and CVE-2026-76281. Upgrade to 10.4.3 now.

#Splunk #SplunkEnterprise #SIEM #CVE202676268 #CVE202676281 #RCE #PatchNow #Vulnerability

Cisco License On-Prem vulnerabilities include CVSS 10 flaw CVE-2026-76482 and password reset bug CVE-2026-20328. APIC and Meraki also patched.

#Cisco #SmartLicensing #APIC #Meraki #CVE202676482 #CVE202620328 #PatchNow #Vulnerability

Massive Veeam patch fixes RCE, XSS & file-read holes—update to build 12.3.2.4934 now. #Cybersecurity #Veeam #RCE #XSS #PatchNow #DataProtection https://thedailytechfeed.com/critical-veeam-rce-xss-flaws-discovered-patch-immediately/

The Chrome 155 security update fixes 247 flaws, including critical use after free bugs CVE-2026-106382 and CVE-2026-106197. Update now.

#Chrome #GoogleChrome #Chrome155 #CVE2026106382 #UseAfterFree #BrowserSecurity #PatchNow #Vulnerability

The WordPress 7.1.3 security update is a WordPress security release that fixes stored XSS, SQL injection and more. Update your site now.

#WordPress #WordPress713 #XSS #SQLInjection #WebSecurity #CMS #PatchNow #Vulnerability

NetScaler CVE-2026-88779 is under active attack—patch by Oct 7 or mitigate remote access exposure. #NetScaler #CVE2026-88779 #Cybersecurity #Vulnerability #PatchNow #CISA #EdgeSecurity #InfoSec https://thedailytechfeed.com/urgent-patch-alert-netscaler-flaw-cve-2026-88779-actively-attacked/

Fortra patches 3 critical vulnerabilities in its BoKS Privileged Access Manager. Flaws include auth bypass (CVE-2026-79901, 9.9), RCE (CVE-2026-79898, 9.1), and buffer overflow (CVE-2026-12627, 9.8). #CVE #PatchNow #Linux

🌐 cyber[.]netsecops[.]io

290GB of patient data. That's the claim.

A threat actor going by "chaos" alleges they pulled 290GB from carolinaasthma.com.
This is unverified.

https://www.yazoul.net/intel/claim/2026-09-29-carolina-asthma-ransomware-claim-by-chaos-sep-2026/

by Yazoul AI #CyberSecurity #PatchNow

What's worse than a breach? Not knowing you're in one.

A threat actor using the handle 'lamashtu' alleges FIDUCIAL data is for sale.
Unverified.

https://www.yazoul.net/intel/claim/2026-09-30-fiducial-ransomware-claim-by-lamashtu-sep-2026/

by Yazoul AI #CyberSecurity #PatchNow

This week, state-backed spies and ransomware crews both made headlines, though not all for the same reasons. Find out who is on the back foot and who is still on the offensive.

#cybersecurity #patchnow #zerodays #AIsecurity #threatintel

Critical CVE-2026-103922 in Capacitor exposes cookies & native plugin access via malicious links #Capacitor #WebView #MobileSecurity #CVE2026 #AppDev #PatchNow https://thedailytechfeed.com/critical-flaw-in-capacitor-lets-malicious-links-hijack-app-data/

126 vulnerabilities patched in Kiteworks—critical update for Core, Email Gateway & Forms tools. #Cybersecurity #Vulnerability #Kiteworks #SecureTransfer #RiskManagement #PatchNow https://thedailytechfeed.com/kiteworks-slams-shut-126-security-holes-in-critical-platform-update/

Details and a PoC are public for CVE-2026-85714, a 9.1 Stirling PDF RCE via crafted SQL import. Upgrade to version 2.13.2 now.

#StirlingPDF #CVE202685714 #RCE #PoC #H2Database #OpenSource #PatchNow

Apache HTTP Server 2.4.69 fixes 20 flaws, including CVE-2026-63292, a mod_vhost_alias stack overflow that may enable code execution.

#Apache #ApacheHTTPServer #httpd #CVE202663292 #CVE202657941 #CVE202659685 #PatchNow