🚨 Critical TeamCity vulnerability now being exploited by ransomware groups. CVE-2026-63077 CVSS score of 9.8.

#Cybersecurity #Ransomware #DevSecOps #TeamCity #JetBrains #CICD #SupplyChainSecurity #VulnerabilityManagement #SoftwareSecurity #CloudSecurity

tech-insider.org/teamcity-cve...

Critical zero-days hit Citrix NetScaler, Cisco SD-WAN, & FortiMail boundary gateways as unauthenticated actors seize administrative control while Cl0p strikes Oracle EBS instances in mass extortion

inferlume.com/reports/dail...

#ThreatIntel #CyberSecurity #InfoSec #VulnerabilityManagement #ZeroDay

CVSS measures severity, not your actual risk. Learn how exposure, exploitability, asset importance, active attacks, and controls should shape patch priorities. #vulnerabilitymanagement

Weekly CVE report for Sept 28 - Oct 4, 2026: 2,652 new CVEs and seven exploited vulnerabilities in Cisco, FortiMail, MediaWiki and Citrix.

#WeeklyCVEReport #ExploitedVulnerabilities #CISAKEV #ZeroDay #PatchManagement #Cisco #FortiMail #VulnerabilityManagement

Cloudflare shared details on how they addressed a cross-tenant data exposure vulnerability affecting Cloudflare Containers & Cloudflare Sandboxes.

Read more here:
blog.cloudflare.com/containers-c...

#CyberSecurity #CloudSecurity #Cloudflare #DevSecOps #InfoSec #VulnerabilityManagement #Containers

Zammad security alert: session hijacking and remote code execution

CVE-2026-102489 concerns session hijacking
#Zammad #CyberSecurity #VulnerabilityManagement #SecPoint #Penetrator

SecPoint Protector V70 and Penetrator V69.1 October 2026 Software Images Available

The October 2026 software images for SecPoint Protector and SecPoint Penetrator are now available in the SecPoint VIP Lounge.
vip.secpoint.com

#SecPoint #Protector #Penetrator #CyberSecurity #VulnerabilityManagement

The Bugs That Never Existed: How AI-Generated CVEs Got Critical Scores
https://whitespots.io/blog/the-bugs-that-never-existed
#CVE #vulnerabilitymanagement #AI

ICS[AP] Dashboards are updated with the 6 CISA Advisories released on 10/1/2026:

Johnson Controls: 2 New
ABB: 1 New
Armatura LLC: 1 New - ⚠ KEV MATCH FOUND: CVE-2023-46604 - Apache ActiveMQ
Meari: 1 New
Monta: 1 New
(www.icsadvisoryproject.com)
#icssecurity
#otsecurity
#vulnerabilitymanagement

ICS[AP] updated CISA ICS Advisories Master File for 10/1/2026 & the following year's CSVs:

CISA_ICS_ADV_2026_10_1_26.csv

Available @ ICS[AP] GitHub:
github.com/icsadvprj/IC...

#opensource
#vulnerabilitymanagement
#icssecurity

Vulnerability exploitation is now the most common initial access vector for breaches.

A vulnerability assessment tells you where you stand today. A vulnerability management program keeps you there.
graylog.org/post/the-val...
#VulnerabilityManagement #InfoSec #CyberSecurity #SIEM #BlueTeam

What Is CVSS? How to Read Scores and Prioritize Fixes

#CVSS #VulnerabilityManagement #CVE

https://singulism.com/en/2026-10-01-what-is-cvss-how-to-read-scores-and-prioritize-fixes/

Most open critical and high flaws are over 90 days old

🔗 Read more: www.helpnetsecurity.com/2026/09/30/r...

#vulnerabilitymanagement #appsec #cybersecurity
@detectify.bsky.social

Manual CVE tracking burns 6-10h a week and NVD keeps lagging. The ValtersIT API bundles enriched CVSS, EPSS and PoC data in one call. https://www.valtersit.com/guides/api/valtersit-cve-api-why-buy-vulnerability-intelligence/
#vulnerabilitymanagement #cve #infosec

ICS[AP] Dashboards are updated with the 7 CISA Advisories released on 9/29/2026:

New:
Anjvision
Baicells Technologies
Lantronix
MikroTik
Toptech Systems
VIVOTEK
Viidure

[www.icsadvisoryproject.com](www.icsadvisoryproject.com)
#icssecurity
#otsecurity
#vulnerabilitymanagement

ICS[AP] updated CISA ICS Advisories Master File for 9/29/2026 & the following year's CSVs:

CISA_ICS_ADV_2026_9_29_26.csv

Available @ ICS[AP] GitHub:
github.com/icsadvprj/IC...

#opensource
#vulnerabilitymanagement
#icssecurity

🛡️ BaseFortify uses CPE data to match CVEs with your registered components.

Our CVE reports also provide AI Q&A and a Chat Assistant to help investigate vulnerabilities.

Try it here 👇

basefortify.eu/register

#BaseFortify #CVE #VulnerabilityManagement

CVE Alerts turns CVE, KEV, and EPSS data into real-time alerts via email, Slack, Teams, and GitHub Issues. Start your 14-day free trial.

#CVEAlerts #Cybersecurity #VulnerabilityManagement #CISAKEV #EPSS #ThreatIntel #InfoSec #PatchManagement #ExploitIntel #DevSecOps #SecurityOps

CISA added WSO2 and Adobe Commerce/Magento flaws to its list of exploited vulnerabilities. Run either? Check versions and patch. Attackers are using them.

www.cisa.gov/news-events/...

#Cybersecurity #CISA #VulnerabilityManagement

Active zero days breach Cisco email gateways, Check Point servers, F5 controllers, and identity planes.

Read full Inferlume report here: inferlume.com/reports/dail...

#CyberThreatIntelligence #ZeroDay #VulnerabilityManagement #IncidentResponse #ThreatHunting #NetworkSecurity