European Union
Global standards
US
UK
Australia
Netherlands
Ticker feed: Vulnerabilities
An espionage group that Mandiant tracks as Armory Castle, and researchers assess as likely China-nexus, exploited a zero-day in BeyondTrust Remote Support starting August 29, 2026. The flaw, CVE-2026-102764 (CVSS v4 9.3, Critical), stems from a messaging component that failed to validate where incoming messages came from — a serious problem in software that gives IT teams remote control over computers and servers.
Attackers moved fast. About 11 minutes after their first exploit request, a custom webshell landed. They then escalated to root, went after the appliance’s credential vault, deleted logs, and pulled internal documents off a user’s desktop. BeyondTrust knows of two affected customers so far.
BeyondTrust shipped a fix on October 8, and hosted instances are already patched. Self-hosted appliances on versions 24.3.1 through 26.2.3 need the BT26-05-RS patch; older versions must upgrade first. CISA added the flaw to its Known Exploited Vulnerabilities catalog on October 16. Mandiant warns broad exploitation may follow and advises treating unpatched internet-facing appliances as potentially compromised.
The disclosure capped a rough week, with actively exploited edge flaws from Ivanti, Cisco, and Palo Alto Networks surfacing within days of each other.
Source: Dark Reading
An espionage group that Mandiant tracks as Armory Castle, and researchers assess as likely China-nexus, exploited a zero-day in BeyondTrust Remote Support starting August 29, 2026. The flaw, CVE-2026-102764 (CVSS v4 9.3, Critical), stems from a messaging component that failed to validate where incoming messages came from — a serious problem in software that gives IT teams remote control over computers and servers.
Attackers moved fast. About 11 minutes after their first exploit request, a custom webshell landed. They then escalated to root, went after the appliance’s credential vault, deleted logs, and pulled internal documents off a user’s desktop. BeyondTrust knows of two affected customers so far.
BeyondTrust shipped a fix on October 8, and hosted instances are already patched. Self-hosted appliances on versions 24.3.1 through 26.2.3 need the BT26-05-RS patch; older versions must upgrade first. CISA added the flaw to its Known Exploited Vulnerabilities catalog on October 16. Mandiant warns broad exploitation may follow and advises treating unpatched internet-facing appliances as potentially compromised.
The disclosure capped a rough week, with actively exploited edge flaws from Ivanti, Cisco, and Palo Alto Networks surfacing within days of each other.
Source: Dark Reading
France’s cybersecurity agency has widened its warning over the October 11 refrigeration attack to cover Copeland XWEB and Dixell XWEB controllers alongside Danfoss AK-SM and AK-SC series. Copeland declined to confirm ANSSI’s findings at first, then acknowledged a vulnerability and said it is working with affected customers.
Danfoss points at the hardware’s age. Most affected units are AK-SM 800 and AK-SC 355 systems that reached end of life years ago and receive no patches — Danfoss stopped supporting the AK-SM 800 in May 2021, and the AK-SC 355 was discontinued in 2016. Some current AK-SM 800A controllers running outdated firmware were caught too. How the attackers got in remains unestablished, and no claim of responsibility or ransom demand has emerged.
The reach is wider than France. Sekoia told Reuters that stores in Spain, Portugal, Poland, Germany, and Belgium were also affected. Reuters puts total losses in the tens of millions of euros, and insurance brokers warn standard cyber policies often exclude physical damage.
CERT-FR wants affected controllers off the internet, with remote access restored only through a secure VPN or protected network. For compromised end-of-life devices, a factory reset won’t do — the device stays vulnerable and gets hit again if it remains exposed. Operators appear to be listening: Censys counted more than 1 800 exposed Danfoss panels in France on October 11, and 537 by October 14, with patched and unpatched versions vanishing at the same rate.
Source: SecurityWeek
France’s cybersecurity agency has widened its warning over the October 11 refrigeration attack to cover Copeland XWEB and Dixell XWEB controllers alongside Danfoss AK-SM and AK-SC series. Copeland declined to confirm ANSSI’s findings at first, then acknowledged a vulnerability and said it is working with affected customers.
Danfoss points at the hardware’s age. Most affected units are AK-SM 800 and AK-SC 355 systems that reached end of life years ago and receive no patches — Danfoss stopped supporting the AK-SM 800 in May 2021, and the AK-SC 355 was discontinued in 2016. Some current AK-SM 800A controllers running outdated firmware were caught too. How the attackers got in remains unestablished, and no claim of responsibility or ransom demand has emerged.
The reach is wider than France. Sekoia told Reuters that stores in Spain, Portugal, Poland, Germany, and Belgium were also affected. Reuters puts total losses in the tens of millions of euros, and insurance brokers warn standard cyber policies often exclude physical damage.
CERT-FR wants affected controllers off the internet, with remote access restored only through a secure VPN or protected network. For compromised end-of-life devices, a factory reset won’t do — the device stays vulnerable and gets hit again if it remains exposed. Operators appear to be listening: Censys counted more than 1 800 exposed Danfoss panels in France on October 11, and 537 by October 14, with patched and unpatched versions vanishing at the same rate.
Source: SecurityWeek
SonicWall’s SMA 1000 appliances carry a flaw that scores a perfect 10.0 on CVSS, and attackers began probing for it two days after the fix shipped. CVE-2026-102255 is a pre-authentication server-side request forgery bug in the WorkPlace portal. SonicWall says an unintended access path lets a remote, unauthenticated attacker direct the appliance to issue requests on the attacker’s behalf and reach internal functionality.
The advisory landed on October 6, with SonicWall saying at the time there was no evidence any of its four flaws had been exploited in the wild. Defused logged unauthenticated SSRF traffic against its SMA decoys from October 8, and Previdian reported attempts on its sensors the next day. Benoît Sevens of Anthropic reported the flaw; technical details have not been published.
Upgrade the 6210, 7210 and 8200v to 12.4.3-03670 or 12.5.0-03082. September’s platform hotfixes, 12.4.3-03526 and 12.5.0-02952, are still vulnerable, so patching last month doesn’t cover you. There’s no workaround. SSL-VPN on SonicWall firewalls and the SMA 100 Series are unaffected.
Source: Dark Reading
SonicWall’s SMA 1000 appliances carry a flaw that scores a perfect 10.0 on CVSS, and attackers began probing for it two days after the fix shipped. CVE-2026-102255 is a pre-authentication server-side request forgery bug in the WorkPlace portal. SonicWall says an unintended access path lets a remote, unauthenticated attacker direct the appliance to issue requests on the attacker’s behalf and reach internal functionality.
The advisory landed on October 6, with SonicWall saying at the time there was no evidence any of its four flaws had been exploited in the wild. Defused logged unauthenticated SSRF traffic against its SMA decoys from October 8, and Previdian reported attempts on its sensors the next day. Benoît Sevens of Anthropic reported the flaw; technical details have not been published.
Upgrade the 6210, 7210 and 8200v to 12.4.3-03670 or 12.5.0-03082. September’s platform hotfixes, 12.4.3-03526 and 12.5.0-02952, are still vulnerable, so patching last month doesn’t cover you. There’s no workaround. SSL-VPN on SonicWall firewalls and the SMA 100 Series are unaffected.
Source: Dark Reading
A high-severity vulnerability (CVE-2026-23870, CVSS 7.5) in React Server Components lets attackers freeze Next.js servers with a single crafted POST request — no authentication needed.
The flaw lives in how React rebuilds form data before running a Server Action. A request with 10 000 references and 10 000 form fields triggers roughly 100 million string comparisons, choking the CPU and blocking Node.js’s event loop. Researcher Simon Koeck showed that a request of around 900 KB is enough to trigger that workload, and the article notes legitimate users can end up with slow loads, timeouts, or 503s.
Because the parsing happens before your Server Action’s own code runs, checks written inside the action won’t help. Public endpoints are the most exposed, but any logged-in user who can reach a Server Action is enough.
React patched versions 19.0.0–19.0.5, 19.1.0–19.1.6, and 19.2.0–19.2.5 in releases 19.0.6, 19.1.7, and 19.2.6. Check your resolved dependency tree rather than your top-level Next.js version — the affected packages are react-server-dom-webpack, react-server-dom-turbopack, and react-server-dom-parcel, and they arrive through framework dependencies. Proxy body-size limits and rate controls cut exposure, but patching React is the actual fix.
Source: Cybersecurity News
A high-severity vulnerability (CVE-2026-23870, CVSS 7.5) in React Server Components lets attackers freeze Next.js servers with a single crafted POST request — no authentication needed.
The flaw lives in how React rebuilds form data before running a Server Action. A request with 10 000 references and 10 000 form fields triggers roughly 100 million string comparisons, choking the CPU and blocking Node.js’s event loop. Researcher Simon Koeck showed that a request of around 900 KB is enough to trigger that workload, and the article notes legitimate users can end up with slow loads, timeouts, or 503s.
Because the parsing happens before your Server Action’s own code runs, checks written inside the action won’t help. Public endpoints are the most exposed, but any logged-in user who can reach a Server Action is enough.
React patched versions 19.0.0–19.0.5, 19.1.0–19.1.6, and 19.2.0–19.2.5 in releases 19.0.6, 19.1.7, and 19.2.6. Check your resolved dependency tree rather than your top-level Next.js version — the affected packages are react-server-dom-webpack, react-server-dom-turbopack, and react-server-dom-parcel, and they arrive through framework dependencies. Proxy body-size limits and rate controls cut exposure, but patching React is the actual fix.
Source: Cybersecurity News
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed attackers to take over every agent in an AWS account and region with a single chatbot prompt. Tamir Ishay Sharbat of Zenity Labs, an AI security vendor, revealed the flaw — dubbed “AgentCorruption” — at SecTor 2026 in Toronto.
The issue stemmed from agents running inside Firecracker MicroVMs without proper network isolation, letting attackers query AWS’s Instance Metadata Service (IMDS) for temporary credentials. From there, broad default permissions meant attackers could invoke other agents, read sessions, and raid AWS Secrets Manager.
AWS patched the flaw in February, enforcing IMDSv2 on all new agents and stripping permissions from default roles — but disputes Zenity’s framing, telling Dark Reading the research recasts documented, intended behavior as a vulnerability. Zenity is now investigating whether similar weaknesses exist on other cloud platforms, and Sharbat says the IMDS problem isn’t specific to AWS. Keep each agent’s role narrow, he says, and anyone who reaches IMDS finds a smaller blast radius.
Source: Dark Reading
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed attackers to take over every agent in an AWS account and region with a single chatbot prompt. Tamir Ishay Sharbat of Zenity Labs, an AI security vendor, revealed the flaw — dubbed “AgentCorruption” — at SecTor 2026 in Toronto.
The issue stemmed from agents running inside Firecracker MicroVMs without proper network isolation, letting attackers query AWS’s Instance Metadata Service (IMDS) for temporary credentials. From there, broad default permissions meant attackers could invoke other agents, read sessions, and raid AWS Secrets Manager.
AWS patched the flaw in February, enforcing IMDSv2 on all new agents and stripping permissions from default roles — but disputes Zenity’s framing, telling Dark Reading the research recasts documented, intended behavior as a vulnerability. Zenity is now investigating whether similar weaknesses exist on other cloud platforms, and Sharbat says the IMDS problem isn’t specific to AWS. Keep each agent’s role narrow, he says, and anyone who reaches IMDS finds a smaller blast radius.
Source: Dark Reading
ClickFix, the social engineering trick that fools users into pasting malicious commands into PowerShell, Windows Run, or the macOS Terminal, is evolving to dodge detection. Two new campaigns show attackers rebuilding the moment where a pasted command turns into a payload.
Flare researcher Assaf Morag detailed a campaign spreading CrocoRat — a remote access Trojan and crypto stealer. The victim still pastes a command from the clipboard, but that command now queries a DNS TXT record on an attacker-controlled server, and the record hands back the next PowerShell instruction. The next stage never touches the clipboard, so defenders have fewer forensics to work with.
Flare also found an unexecuted Python launcher in the package, built to choose its payload by environment: a quiet, persistent foothold on systems that look corporate, and the full RAT plus credential and crypto stealers on systems that look personal. The operator appears to be limiting theft on corporate targets to avoid tripping detection.
Microsoft Threat Intelligence flagged a separate cluster of compromised websites that pre-fetch a script into the browser cache, disguised as a PNG, before the fake prompt ever appears. That hides the payload and gets around the Run dialog's character limit. Morag's advice goes after the step itself: alert on clipboard-to-Run patterns, harden PowerShell script-block logging, stop interpreters running from writable directories, and train users on the tells — fake CAPTCHAs, press-Windows+R prompts, and verification-failed screens
Source: Dark Reading
ClickFix, the social engineering trick that fools users into pasting malicious commands into PowerShell, Windows Run, or the macOS Terminal, is evolving to dodge detection. Two new campaigns show attackers rebuilding the moment where a pasted command turns into a payload.
Flare researcher Assaf Morag detailed a campaign spreading CrocoRat — a remote access Trojan and crypto stealer. The victim still pastes a command from the clipboard, but that command now queries a DNS TXT record on an attacker-controlled server, and the record hands back the next PowerShell instruction. The next stage never touches the clipboard, so defenders have fewer forensics to work with.
Flare also found an unexecuted Python launcher in the package, built to choose its payload by environment: a quiet, persistent foothold on systems that look corporate, and the full RAT plus credential and crypto stealers on systems that look personal. The operator appears to be limiting theft on corporate targets to avoid tripping detection.
Microsoft Threat Intelligence flagged a separate cluster of compromised websites that pre-fetch a script into the browser cache, disguised as a PNG, before the fake prompt ever appears. That hides the payload and gets around the Run dialog's character limit. Morag's advice goes after the step itself: alert on clipboard-to-Run patterns, harden PowerShell script-block logging, stop interpreters running from writable directories, and train users on the tells — fake CAPTCHAs, press-Windows+R prompts, and verification-failed screens
Source: Dark Reading
A fresh zero-day vulnerability is hitting Citrix NetScaler appliances — even ones administrators had just patched days earlier. Tracked as CVE-2026-88779, the high-severity memory overflow flaw affects NetScaler ADC and Gateway instances configured as SAML SP or IdP, causing Denial of Service through repeated crashes. Those earlier patches covered CVE-2026-88771 and CVE-2026-88772, fixed the week before.
Security researcher Kevin Beaumont, who named this one PitScaler 2, confirmed seeing exploitation attempts against patched honeypots, and reported one honeypot running a downloaded malware binary. Admins reported reboots alongside logs showing shell commands buried in username fields. One admin who retrieved the script said it tries to plant web shells, survive reboots and upload configuration and backups — while cautioning there was no proof it ever ran.
Security firm watchTowr has since reproduced the flaw and found it can only crash systems, with no route to code execution. The firm suspects attackers crashed machines deliberately to make exploitation of CVE-2026-88771 faster. Citrix says the same thing from its side: service availability is affected, customer data integrity is not.
CISA added the flaw to its KEV catalog on October 4, giving federal agencies until October 7 to remediate. It's the sixth exploited NetScaler vulnerability CISA has cataloged in 2026.
Source: SecurityWeek
A fresh zero-day vulnerability is hitting Citrix NetScaler appliances — even ones administrators had just patched days earlier. Tracked as CVE-2026-88779, the high-severity memory overflow flaw affects NetScaler ADC and Gateway instances configured as SAML SP or IdP, causing Denial of Service through repeated crashes. Those earlier patches covered CVE-2026-88771 and CVE-2026-88772, fixed the week before.
Security researcher Kevin Beaumont, who named this one PitScaler 2, confirmed seeing exploitation attempts against patched honeypots, and reported one honeypot running a downloaded malware binary. Admins reported reboots alongside logs showing shell commands buried in username fields. One admin who retrieved the script said it tries to plant web shells, survive reboots and upload configuration and backups — while cautioning there was no proof it ever ran.
Security firm watchTowr has since reproduced the flaw and found it can only crash systems, with no route to code execution. The firm suspects attackers crashed machines deliberately to make exploitation of CVE-2026-88771 faster. Citrix says the same thing from its side: service availability is affected, customer data integrity is not.
CISA added the flaw to its KEV catalog on October 4, giving federal agencies until October 7 to remediate. It's the sixth exploited NetScaler vulnerability CISA has cataloged in 2026.
Source: SecurityWeek
Citrix has pushed emergency patches for a zero-day vulnerability in NetScaler ADC and Gateway appliances that attackers are already exploiting. Tracked as CVE-2026-88779 with a CVSS 4.0 score of 8.7, the memory overflow flaw hits systems configured as SAML service providers or identity providers, triggering denial of service through repeated crashes. No credentials or user interaction are needed to exploit it — just network access, and attack complexity is low.
Citrix confirmed targeted attacks and says the impact is availability only, with no sign of data theft. Its CVSS vector agrees, rating confidentiality and integrity impact at none. But the question isn't closed. Administrators logged authentication requests carrying shell commands, Kevin Beaumont saw a malware binary running on a patched honeypot, and watchTowr reproduced the flaw within hours. Nobody has confirmed code execution, and nobody has ruled it out.
Either way, the clock is running. CISA added the flaw to its Known Exploited Vulnerabilities catalog on October 4 and gave federal agencies until October 7 to fix it, with forensic triage required under BOD 26-04 to establish whether an appliance was hit before the patch went on. To find out if you're in scope, check the configuration for add authentication samlAction or add authentication samlIdPProfile — either entry meets the precondition.
Administrators who patched for the two earlier NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, must upgrade again. Go to 14.1-73.41 or 13.1-64.28 on the standard branches, 14.1-73.41 FIPS for FIPS appliances, or 13.1-37.282 for 13.1 FIPS and NDcPP. Citrix-managed cloud services are covered already. Global Deny Lists buy time; patching ends it.
Source: Cyber Security News
Citrix has pushed emergency patches for a zero-day vulnerability in NetScaler ADC and Gateway appliances that attackers are already exploiting. Tracked as CVE-2026-88779 with a CVSS 4.0 score of 8.7, the memory overflow flaw hits systems configured as SAML service providers or identity providers, triggering denial of service through repeated crashes. No credentials or user interaction are needed to exploit it — just network access, and attack complexity is low.
Citrix confirmed targeted attacks and says the impact is availability only, with no sign of data theft. Its CVSS vector agrees, rating confidentiality and integrity impact at none. But the question isn't closed. Administrators logged authentication requests carrying shell commands, Kevin Beaumont saw a malware binary running on a patched honeypot, and watchTowr reproduced the flaw within hours. Nobody has confirmed code execution, and nobody has ruled it out.
Either way, the clock is running. CISA added the flaw to its Known Exploited Vulnerabilities catalog on October 4 and gave federal agencies until October 7 to fix it, with forensic triage required under BOD 26-04 to establish whether an appliance was hit before the patch went on. To find out if you're in scope, check the configuration for add authentication samlAction or add authentication samlIdPProfile — either entry meets the precondition.
Administrators who patched for the two earlier NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, must upgrade again. Go to 14.1-73.41 or 13.1-64.28 on the standard branches, 14.1-73.41 FIPS for FIPS appliances, or 13.1-37.282 for 13.1 FIPS and NDcPP. Citrix-managed cloud services are covered already. Global Deny Lists buy time; patching ends it.
Source: Cyber Security News
GitLab has pushed urgent security updates to fix a critical vulnerability in its AI Gateway component, tracked as CVE-2026-90970 with a near-perfect CVSS 3.1 score of 9.9. The flaw lets authenticated users with Duo Agent Platform access submit crafted flow configurations that break out of the prompt template sandbox and execute arbitrary commands on the gateway server. Security researcher invisiblemeerkat reported it.
Affected builds run from 18.1.6 up to 19.2.4, plus 19.3 before 19.3.2 and 19.4 before 19.4.1 — and those three releases are the fixes, available now. Note that's the gateway's own version, not your GitLab instance's, so check the deployment itself before deciding you're clear.
Most customers don't have to. GitLab.com, Dedicated, and self-managed instances pointed at a GitLab-hosted gateway are already covered. Only operators running their own AI Gateway must upgrade manually — immediately. GitLab hasn't reported any exploitation, but the attack needs low complexity and no user interaction at all, so the bar is a valid Duo-enabled account and nothing more.
Source: Cybersecurity News
GitLab has pushed urgent security updates to fix a critical vulnerability in its AI Gateway component, tracked as CVE-2026-90970 with a near-perfect CVSS 3.1 score of 9.9. The flaw lets authenticated users with Duo Agent Platform access submit crafted flow configurations that break out of the prompt template sandbox and execute arbitrary commands on the gateway server. Security researcher invisiblemeerkat reported it.
Affected builds run from 18.1.6 up to 19.2.4, plus 19.3 before 19.3.2 and 19.4 before 19.4.1 — and those three releases are the fixes, available now. Note that's the gateway's own version, not your GitLab instance's, so check the deployment itself before deciding you're clear.
Most customers don't have to. GitLab.com, Dedicated, and self-managed instances pointed at a GitLab-hosted gateway are already covered. Only operators running their own AI Gateway must upgrade manually — immediately. GitLab hasn't reported any exploitation, but the attack needs low complexity and no user interaction at all, so the bar is a valid Duo-enabled account and nothing more.
Source: Cybersecurity News
Researchers at Bay Area Labs have uncovered a critical vulnerability (CVE-2026-18397, scored 9.4 by Thales on the CVSS 4.0 scale) in SConnect, a browser-based authentication tool with more than a million Chrome installs, used to access SWIFT banking networks and major government systems in Qatar and Sweden. The flaw lets attackers execute remote code on victims' machines via a malicious webpage, or any iframe loaded onto one — no interaction required beyond a visit, and 6–10 seconds in the researchers' testing.
The bug stems from a homegrown cryptographic check. SConnect verifies a site's RSA signature inside a block of memory it never clears first, so whatever was there before stays put. Feed it an oversized signature and the calculation fails without writing anything — but the check reads that block anyway. That means an attacker who sprays the right bytes into memory passes as a Thales-approved site, and an approved site can tell SConnect to load a plugin.
Pulling that off isn't easy: AI-assisted exploitation made it work roughly 18% of the time. But failed attempts raise nothing the user can see, so an attacker just keeps firing until one lands. Thales patched the Chrome and Apple versions on August 7, then pulled SConnect from Edge on September 13 — 89 000 users still had it, and the researchers can't confirm those copies were removed — and published the CVE on October 1.
SWIFT replaced SConnect with Web Connect in September 2025 and retired SConnect in September this year. Even so, the researchers expect SConnect is still the fallback wherever Web Connect isn't configured, which is why many SWIFT users may still be running it. Update to host 2.16.1.0 and extension 2.16.1.1, then switch to Web Connect.
Source: Dark Reading
Researchers at Bay Area Labs have uncovered a critical vulnerability (CVE-2026-18397, scored 9.4 by Thales on the CVSS 4.0 scale) in SConnect, a browser-based authentication tool with more than a million Chrome installs, used to access SWIFT banking networks and major government systems in Qatar and Sweden. The flaw lets attackers execute remote code on victims' machines via a malicious webpage, or any iframe loaded onto one — no interaction required beyond a visit, and 6–10 seconds in the researchers' testing.
The bug stems from a homegrown cryptographic check. SConnect verifies a site's RSA signature inside a block of memory it never clears first, so whatever was there before stays put. Feed it an oversized signature and the calculation fails without writing anything — but the check reads that block anyway. That means an attacker who sprays the right bytes into memory passes as a Thales-approved site, and an approved site can tell SConnect to load a plugin.
Pulling that off isn't easy: AI-assisted exploitation made it work roughly 18% of the time. But failed attempts raise nothing the user can see, so an attacker just keeps firing until one lands. Thales patched the Chrome and Apple versions on August 7, then pulled SConnect from Edge on September 13 — 89 000 users still had it, and the researchers can't confirm those copies were removed — and published the CVE on October 1.
SWIFT replaced SConnect with Web Connect in September 2025 and retired SConnect in September this year. Even so, the researchers expect SConnect is still the fallback wherever Web Connect isn't configured, which is why many SWIFT users may still be running it. Update to host 2.16.1.0 and extension 2.16.1.1, then switch to Web Connect.
Source: Dark Reading
