Fortinet warns that critical flaw in FortiMail is facing exploitation
Security researchers warn that attackers can gain access to credentials, stored mail and other connected systems. Source link
Month: October 2026
Clint Gibler on AI and cybersecurity: the current state of the art and where we’re headed
ChatGPT is just the beginning. New AI tools are launching often, and new tools bring new functionality. With the long history of machine learning being…
Frontline Education breach exposes school district employee data
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems…
Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials
Hackers are turning trusted software updates into a route for stealing developer and cloud credentials. Recent supply chain incidents show how a single altered package,…
Shadow AI and the permissions problem: what to check before handing AI the keys
AI tools have moved from novelty to daily habit with remarkable speed, and for many people they are now as much a part of the…
ICE Has Been Dumping Protester Photos Into a Palantir Database
An explosive and newly partially unsealed court filing alleges that the US Department of Homeland Security built up dossiers on ICE observers—including their photos, license…
Zammad Vulnerabilities Let Attackers Execute Code and Escalate Privileges to Root
Two critical vulnerabilities in the open-source Zammad helpdesk and ticketing platform can be exploited together, enabling attackers to achieve remote code execution and gain root-level…
Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)
Fortinet is warning customers that attackers are exploiting a zero-day vulnerability (CVE-2026-104286) in FortiMail, its email security gateway. Fortinet says the flaw has been reported…
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
Swati KhandelwalOct 02, 2026Vulnerability / Application Security A critical flaw in GitLab’s AI Gateway could let a logged-in user with Duo Agent Platform access run…
UK and Europe at risk from Chinese tech, says security think tank
European telecoms and computer infrastructure is vulnerable to hostile state interference with Chinese equipment suppliers such as Huawei and ZTE deeply embedded in parts of…
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
A macOS dropper has been found inside a disguised Zoom client. The malware is tracked as CloudSyncD and is designed to deliver a persistent and…
U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 02, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet…