Top 5 Cybersecurity News

Top 5 Cybersecurity News, October 9, 2026: FortiBleed lockouts, AI-driven bank hacks, the ASOS app breach, Osaka ransomware and Warlock SharePoint attacks.

This week’s Top 5 Cybersecurity News for October 9, 2026 has one thing in common: nobody needed a new exploit. A credential campaign against Fortinet firewalls now locks owners out of their own devices and feeds ransomware affiliates. An open-source AI tool probed South Korean banks through employee-facing systems. ASOS customers received their breach announcement…

Read More

FortiMail Zero-Day Vulnerability Exploited in the Wild

A FortiMail zero-day vulnerability lets attackers write files with no login. Exploited now; fixes for 7.4, 7.6 and 8.0 were pending at disclosure.

A FortiMail zero-day vulnerability, CVE-2026-104286 (CVSS 9.8), lets an unauthenticated attacker write arbitrary files onto Fortinet’s email security appliance with nothing more than crafted web requests. Fortinet confirmed active exploitation on October 1, CISA added the flaw to its Known Exploited Vulnerabilities catalog the same day, and fixed releases for the 7.4, 7.6 and 8.0…

Read More