60
60
NGINX Rift: an 18-year-old flaw in the world's most deployed web server just came to light
60
60
60
60
60
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months
60
60
Week in review: Several companies affected by the Salesloft Drift breach, Sitecore 0-day vulnerability
60
60
60
60
60
60
Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities
60
60
60
60
60
60
60
60
Microsoft's Final 2023 Patch Tuesday: 34 Flaws Fixed, Including 4 Critical
60
60
60
Week in review: 18 free Microsoft Azure cybersecurity resources, K8 vulnerability allows RCE
60
Beyond the Perimeter: Building Resilience Against Cloud and SaaS Supply-Chain Attacks
ShinyHunters exploited an Oracle PeopleSoft zero-day to steal data and extort roughly 100 organizations, including the Council of Europe, for up to $2.3M.
Between May and early June 2026, the ShinyHunters group exploited a critical zero-day in Oracle PeopleSoft across about 100 organizations and 300 instances worldwide, per reports cited by The Register. Stolen records included employee and student personal data, payroll, tax, financial and health information, plus immigration and passport documents. AgentCypher.ai estimates extortion demands of $400,000 to $2.3 million per victim, typically in Bitcoin; the Council of Europe refused to pay. The article uses the incident to argue for Zero Trust, supply-chain risk management, rapid patching, encrypted distributed backups and defined recovery-time objectives.
78
Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper
60
60
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
60
Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero
60
60
60
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited
60
Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS Vulnerability
60
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild
60
Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws
60
Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero
60
Critical N-able N-central Vulnerability and Active Exploitation
N-able N-central pre-auth RCE zero-day CVE-2026-86218 (CVSS 10.0) is exploited in the wild; on-prem admins must upgrade to 2026.3 HF4.
N-able disclosed a third N-central vulnerability, CVE-2026-86218, a pre-authentication RCE rated CVSS 10.0, and released hotfix 2026.3 HF4 superseding build 2026.3.1.13. Huntress reproduced an exploit chain involving an authentication bypass (CVE-2026-86206/CVE-2026-86207) after a fully patched customer's N-central production server was compromised on September 4. Attackers appended strings like .invalid to account names and probed the /remoteControlAction.do?method=getPierDetails endpoint; Huntress worked with Cloudflare to disable adversary tunnel infrastructure. Hosted N-central instances are already patched; on-prem administrators must upgrade immediately.
83