Supply-chain attacks and actively exploited flaws in software engineers run, without the advisory noise. Each claim linked to its source.
16 Narratives · RSS · shorter items in the Daily Brief
Fortinet FortiMail is being attacked through CVE-2026-104286, a critical path-traversal flaw that requires no login and permits arbitrary file writes. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog on October 1, 2026, while reporting the
Built from 3 signals across 3 sources · 105 items reviewed
What changed · following since Sep 28 Oct 5 — CISA added Citrix NetScaler CVE-2026-88779 to the KEV Catalog on October 4 based on evidence of active exploitation.
Google's Threat Intelligence Group (GTIG) published defensive guidance on September 29
Built from 5 signals across 3 sources · 1988 items reviewed
ShinyHunters (UNC6240) has resumed mass exploitation of CVE-2026-35273, a CVSS 9.8 unauthenticated RCE in Oracle PeopleSoft's Environment Management Hub, after modifying its exploit to slip past WAF rules that were supposed to have closed the hole.
Built from 2 signals across 2 sources · 66 items reviewed
WordPress shipped patches on September 22 for a critical, unauthenticated path-traversal flaw in get_page_template() that lets an attacker force a site to load an arbitrary readable local .php file from outside the active theme, turning into remote
Built from 2 signals across 2 sources · 864 items reviewed