Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Critical FortiMail Zero-Day CVE-2026-104286 Exploited in the Wild
Fortinet warns of an active zero-day vulnerability (CVE-2026-104286) in FortiMail email security gateways, allowing arbitrary file writes.
Oct 2, 2026AI Agent Exploits Dual Zammad Zero-Days in DIVD Breach
An agentic AI attack compromised the Dutch Institute for Vulnerability Disclosure by chaining two zero-day vulnerabilities in the Zammad ticketing platform.
Oct 2, 2026Fortinet Warns of Critical FortiMail Zero-Day Exploited in Code Execution Attacks
Fortinet discloses a critical zero-day vulnerability (CVE-2026-104286) in FortiMail management interface being actively exploited for code execution.
Oct 2, 2026Pentagon DMDC Data Breach Exposes PII of 3 Million Defense Personnel
A flaw in a Defense Manpower Data Center file sharing server exposed unencrypted PII for over 3 million military personnel, dependents, and veterans.
Oct 1, 2026Cisco Patches Critical Catalyst SD-WAN Manager Zero-Day (CVE-2026-76504)
Active exploitation of a critical Cisco Catalyst SD-WAN Manager zero-day (CVE-2026-76504) prompts emergency patching and a CISA KEV mandate.
Oct 1, 2026State-Sponsored Hackers Exploit NetScaler Zero-Day CVE-2026-88772
Suspected state-sponsored actors have exploited Citrix NetScaler zero-day CVE-2026-88772 since September to gain root-level network access.
Oct 1, 2026NetScaler Zero-Days Exploited in the Wild to Deploy Persistent Web Shells
Citrix NetScaler ADC and Gateway appliances face active zero-day exploitation via CVE-2026-88771 and CVE-2026-88772 to deploy persistent web shells.
Oct 1, 2026F5 Patches Actively Exploited BIG-IP APM Zero-Day (CVE-2026-94127)
F5 has released patches for CVE-2026-94127, an actively exploited zero-day RCE vulnerability in BIG-IP APM devices configured as OAuth authorization servers.
Sep 23, 2026Critical F5 BIG-IP APM Zero-Day Exploited for Remote Code Execution
Unauthenticated attackers are actively exploiting a 9.8-severity zero-day vulnerability in F5 BIG-IP APM (CVE-2026-94127) on the data plane.
Sep 23, 2026ShinyHunters Claims FBI Hack via Oracle PeopleSoft Zero-Day
Extortion group ShinyHunters claims it exploited an unpatched Oracle PeopleSoft zero-day to breach FBI systems and steal up to 3TB of personnel data.
Sep 23, 2026Check Point Patches Zero-Day Flaw Exploited in Management Server Attacks
Check Point releases hotfixes for CVE-2026-93616, a critical unauthenticated path traversal zero-day exploited against Management Servers since July.
Sep 23, 2026Latest Cybersecurity Hiring Spotlight Highlights Surge in AI and eBPF Roles
Industry hiring data reveals growing enterprise demand for agentic SOC automation, eBPF platform security, and threat intelligence leadership.
Sep 22, 2026No news matches your search.