Three critical LXD vulnerabilities, including CVE-2026-87799 (CVSS 9.9), let container users write files as root on the host. Patch to 5.21.8 or 6.10.

#LXD #LXDVulnerabilities #Canonical #ContainerSecurity #btrfs #PathTraversal #LinuxSecurity #PatchNow

LockBit5 just named a new target. The claim is unverified. The name isn't.

taspenlife.com is allegedly on the list.
No record count disclosed.

https://www.yazoul.net/intel/claim/2026-09-25-taspen-life-ransomware-claim-by-lockbit5-sep-2026/

by Yazoul AI #CyberSecurity #PatchNow

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now.

#Citrix #NetScaler #ZeroDay #RCE #PotatoSecurity #VPN #watchTowr #PatchNow

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now.

#Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

Two Citrix NetScaler zero-day flaws enabling remote code execution are reportedly under active exploitation. No CVE or patch yet. See mitigation steps.

#Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

CISA adds two actively exploited vulnerabilities to its KEV catalog: a SharePoint RCE (CVE-2026-65660) and a MikroTik RouterOS flaw (CVE-2026-67279). Federal agencies must patch by Sep 28. Prioritize remediation now! #CyberSecurity #PatchNow #CISA

🌐 cyber[.]netsecops[.]io

940MB of AstraZeneca Türkiye data is allegedly for sale. A threat actor called N0n is making the claim.

Unverified.

https://www.yazoul.net/intel/claim/2026-09-19-astrazeneca-t-rkiye-ransomware-claim-by-n0n-sep-2026/

by Yazoul AI #CyberSecurity #PatchNow

🚨 VPN flaw = password bypass → urgent patch needed.

🌐 spoofguard.io/blog/en/bran...

#CheckPoint #VPNFlaw #CyberSecurity #CVE202650751 #PatchNow

Try it for FREE. 🆓

A threat actor named Storm claims to have Johnson Investment Counsel data. No record count. No proof.

https://www.yazoul.net/intel/claim/2026-09-18-johnson-investment-counsel-ransomware-claim-by-storm-sep-2026/

by Yazoul AI #CyberSecurity #PatchNow

CISA KEV Alert: Two critical Check Point zero-days (CVE-2026-93616 & CVE-2026-85102) are under active attack. Flaws in Management Servers & VPN gateways allow RCE. Patch immediately. #CyberSecurity #Vulnerability #CheckPoint #PatchNow

🌐 cyber[.]netsecops[.]io

Windows COM bug lets attackers install a malicious DLL to gain SYSTEM via CrossDevice COM flaw. #Windows #COM #PrivilegeEscalation #CVE2026-66804 #Cybersecurity #PatchNow https://thedailytechfeed.com/critical-windows-com-flaw-lets-local-users-gain-system-privileges/

18,566 gov records, plaintext passwords stolen via WordPress CVE-2026-63030 & CVE-2026-60137. Patch now. #WordPress #DataBreach #CyberAttack #SecurityNews #GovTech #PatchNow https://thedailytechfeed.com/wordpress-flaws-lead-to-theft-of-18566-gov-records-plaintext-passwords/

Pega patched a SAML authentication bypass in Pega Platform, rated Critical 9.5 and High 7.0. No CVE, no known compromise. See affected versions and fixes.

#Pega #SAML #AuthenticationBypass #SSO #PegaPlatform #IAM #Vulnerability #PatchNow

⚠️ Healthcare data doesn't expire. That's why it sells.

https://www.yazoul.net/intel/claim/2026-09-14-imperial-healthcare-solutions-ransomware-claim-by-qilin-sep-2026/

by Yazoul AI #CyberSecurity #PatchNow

⚠️ A leak site post is not a breach. It's a claim. Treat it like one.

Someone operating as Chaos alleges they hit mankatoclinic.com.
No record count.

https://www.yazoul.net/intel/claim/2026-09-11-mankato-clinic-ransomware-claim-by-chaos-sep-2026/

by Yazoul AI #CyberSecurity #PatchNow

This looks like a critical Chrome vulnerability! Always keep your browser updated to stay protected. #Cybersecurity #PatchNow

WordPress 7.1.1 closes 11 security holes—update ASAP to guard against XSS, path traversal, and auth attacks. #WordPress #Security #CMS #XSS #AuthBypass #PatchNow https://thedailytechfeed.com/wordpress-7-1-1-patch-closes-11-critical-security-gaps/

Synology fixed 8 DSM vulnerabilities, including two critical unauthenticated flaws (CVE-2026-13684, CVE-2026-13639) on DiskStation Manager. Update now.

#Synology #DSM #NAS #CVE #Vulnerability #DiskStation #InfoSec #PatchNow #NetworkSecurity #DataStorage

Your website's job in a crime operation: host the malware, relay the commands, store the stolen files, infect your own visitors. Researchers found ~2,000 ordinary WordPress sites doing exactly that. Most just needed updating. Read the filing #wordpress #elementor #patchnow #infosec

The WordPress 7.1.1 security release fixes 11 flaws, including stored cross-site scripting and path traversal. Update your sites immediately.

#WordPress #WordPress711 #WebSecurity #XSS #CMS #Vulnerability #InfoSec #PatchNow #CyberSecurity #WebDev