Posts by Editorial Team
Atlassian File Access Vulnerability in Data Center
The Atlassian file access vulnerability CVE-2026-21589 (CVSS 9.3) lets an unauthenticated attacker read files from the web root of eight self-hosted products: Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible and Fisheye. Every version is affected until it is upgraded. CISA lists it as exploited, and the patched releases are out. What decides…
Read MoreSeptember 2026 Cybersecurity Roundup
This September 2026 Cybersecurity Roundup covers a month in which ransomware kept disrupting public services and critical infrastructure, while flaws in widely used network appliances created serious exposures of their own. Attacks hit German government and utility networks, and a misconfigured database exposed 220 million Vietnam-linked travel records. Below are the month’s key cyberattacks and…
Read MoreWarlock Ransomware SharePoint Attacks
Warlock ransomware SharePoint attacks have reached a water utility, a telecom provider, a regional government body and a university, according to Symantec and Carbon Black. The China-linked group still gets in through on-premises SharePoint, switches off endpoint protection on dozens of machines within about two hours, and then launches ransomware from a share that every…
Read MoreZammad Zero-Day Vulnerabilities Exploited
Two Zammad zero-day vulnerabilities, CVE-2026-102489 and CVE-2026-102490, let an attacker take over the open-source helpdesk and reach root on its server. The Dutch Institute for Vulnerability Disclosure (DIVD) says an automated AI agent chained them against its own network on September 21. CISA has added the first flaw to its Known Exploited Vulnerabilities catalog, and…
Read MoreFortiMail Zero-Day Vulnerability Exploited in the Wild
A FortiMail zero-day vulnerability, CVE-2026-104286 (CVSS 9.8), lets an unauthenticated attacker write arbitrary files onto Fortinet’s email security appliance with nothing more than crafted web requests. Fortinet confirmed active exploitation on October 1, CISA added the flaw to its Known Exploited Vulnerabilities catalog the same day, and fixed releases for the 7.4, 7.6 and 8.0…
Read More