IT Security & Day-to-Day Patch Intelligence Newsroom | ArabLanka CyberWatch

Threat Wire

BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys BleepingComputer [Critical] FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer [Critical] Alpine Linux rebuilds GitLab after attempted RCE attack CVE-2026-118539 [Critical] Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION CVE-2026-58882 [Critical] SMS of Death: Android under attack, an invisible SMS can block calls and emergency services The Hacker News [Critical] CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News [Critical] FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist CVE-2026-111357 [Critical] U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog BleepingComputer [Critical] Northflank security breach leads to abuse of customers' AI API keys

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

Lead Cyber Advisory Infosecurity Magazine Critical

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheck

Vendor: Infosecurity Magazine · Product: Global Cybersecurity News

View Advisory Details

Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One

Infosecurity Magazine Critical 2026-10-07

Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One

Infosecurity Magazine · Global Cybersecurity News Full Bulletin

Citrix NetScaler Targeted Via New Zero Day

Infosecurity Magazine Critical 2026-10-05

Citrix NetScaler Targeted Via New Zero Day

Infosecurity Magazine · Global Cybersecurity News Full Bulletin

All Security Bulletins 5,807 Active Zero-Days (KEV) 608 Microsoft Patch KBs 849 MSRC Live Wire 1,922 CISA Advisories 157 Threat Intel 2,629

Showing 12 of 12 advisories

Page 1 of 1

Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure

Critical Infosecurity Magazine

2026-10-02 Infosecurity Magazine

Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure

The Dutch Institute for Vulnerability Disclosure reveals agentic AI-powered attack using Zammad zero-days

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

Critical Infosecurity Magazine

2026-10-01 Infosecurity Magazine

Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Apple Patches CoreGraphics Zero Day Exploited in Attacks

Critical CVE-2026-86950 Infosecurity Magazine

2026-09-30 Infosecurity Magazine

Apple Patches CoreGraphics Zero Day Exploited in Attacks

Apple has patched CVE-2026-86950, a zero-day bug in the iOS CoreGraphics engine

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Citrix Patches Critical Zero Days Under Active Exploitation

Critical Infosecurity Magazine

2026-09-28 Infosecurity Magazine

Citrix Patches Critical Zero Days Under Active Exploitation

Citrix has confirmed exploitation of two critical zero-day RCE bugs

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

ShinyHunters Claims FBI Hack Via PeopleSoft Zero Day

Critical Infosecurity Magazine

2026-09-23 Infosecurity Magazine

ShinyHunters Claims FBI Hack Via PeopleSoft Zero Day

Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employees

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping

Critical Infosecurity Magazine

2026-09-16 Infosecurity Magazine

Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping

OPSWAT researchers find two zero-days in TP-Link cameras

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls

Critical Infosecurity Magazine

2026-09-09 Infosecurity Magazine

Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls

The hacking tool, built using a combination of AI models, is effective against Android and iOS devices

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026

Critical Infosecurity Magazine

2026-09-09 Infosecurity Magazine

Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026

The update contained 119 critical flaws and two zero days, with security teams needing to prioritize updates

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Researcher Publishes CrowdStrike Privilege Escalation Zero Day

Critical Infosecurity Magazine

2026-09-07 Infosecurity Magazine

Researcher Publishes CrowdStrike Privilege Escalation Zero Day

A security researcher has posted a zero-day exploit in CrowdStrike which could allow hackers to escalate privileges

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Notification