Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Windows Shell — CVE-2026-96951

Vulnerability High

Windows Shell: a zero-day that strips the internet warning from files, fixed in October’s Patch Tuesday

Among the more than 1,400 flaws fixed by Microsoft on 13 October, CVE-2026-96951 (CVSS 8.8) is already exploited: it lets a booby-trapped file escape the Mark of the Web protectio…

Windows

Ivanti Connect Secure — CVE-2026-104935

Vulnerability Critical

Ivanti Connect Secure: zero-day chain exploited for root access, one of three flaws still unpatched

Attackers chained three unknown flaws in Ivanti Connect Secure VPN appliances to run commands as root without logging in, then harvested Active Directory credentials. Ivanti fixed…

IvantiVPNActive Directory

Vacaf · CAF — Fuite de données — 1,2 M

Vacaf, France's family holiday-aid platform, breached: data of up to 1.2 million families at risk

Vacaf, the holiday-aid service of France's family-benefit funds, was hit by a cyberattack. Up to 1.2 million families' names, children and benefit details may be exposed — no bank…

Vacafdata breachphishing

Danfoss AK-SM · AK-SC — CERTFR-2026-ALE-012

Hundreds of French supermarkets hit as attackers hijack Danfoss refrigeration controllers

During the night of 11 to 12 October 2026, attackers took control of Danfoss refrigeration supervisors in French supermarkets and forced fridges and freezers to heat up. CERT-FR i…

DanfossOT

Integrity Tech · AA26-281A — 8 CVE

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

On 8 October 2026 the FBI, CISA, NSA and agencies from six other countries published a joint advisory on the hackers enabled by Integrity Technology Group, a Chinese company linke…

ExchangeMicrosoft 365Linux

FortiBleed · FortiGate — 86 644

FortiBleed: the FBI warns attackers are still logging into exposed FortiGate firewalls with stolen passwords

The FBI and the US Secret Service warn that FortiBleed, a campaign that steals and cracks passwords for Fortinet FortiGate firewalls and SSL VPN gateways, is still active. Citing …

FortinetVPN

Atlassian Data Center — CVE-2026-21589

Vulnerability High

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Atlassian disclosed on 5 October 2026 CVE-2026-21589 (CVSS 9.3), a path traversal flaw in eight self-hosted products, including Jira, Confluence and Bitbucket Data Center. No logi…

AtlassianJiraConfluence

FBI · PeopleSoft — CVE-2026-35273

Incident Critical

FBI breach: attackers got in through a PeopleSoft patch a contractor never installed

The FBI says the theft of personal data on thousands of its staff happened because a contractor did not apply a security patch to a platform it managed. According to Reuters, that…

OraclePeopleSoft

Metabase — ANSSI · DINUM

France’s cybersecurity agency hit through Metabase: the “harmless” internal tools nobody watches

ANSSI, the French national cybersecurity agency, has confirmed that 118 accounts of its innovation lab were compromised through a critical zero-day in Metabase, a self-hosted dash…

Metabase

Danmark · CPR — 8 800 000

Denmark: 8.8 million people exposed after attackers used a contractor’s access to the national population register

Attackers reached Denmark’s CPR, the central population register, through the legitimate access of a private company allowed to query it. Names, addresses and personal ID numbers …

Microsoft Exchange — CVE-2026-96940

Vulnerability High

Microsoft Exchange: one stolen account is enough to read every mailbox — install the out-of-band fix

CVE-2026-96940 (CVSS 8.8) lets any authenticated user of an on-premises Exchange server read other people’s mail and attachments in the same organisation. Microsoft shipped an out…

ExchangeWindows

Apache httpd — 2.4.69 · 2026-10-01

Advisory Medium

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Apache released httpd 2.4.69 on 1 October 2026 with 20 vulnerability fixes, rated low (15) or moderate (5). No emergency, but every Apache server should be updated in the next mai…

ApacheLinux

DGFiP · ANSSI — impots.gouv.fr · Zerobytes

Tax data stolen from France’s DGFiP: what ANSSI’s incident report teaches every company

ANSSI has published its investigation into this summer’s data thefts at the French tax administration. Its conclusion: no sophisticated attack, but stolen passwords, missing multi…

Citrix NetScaler — CVE-2026-88771 · 88772 · 88779

Vulnerability Critical

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Two pre-authentication flaws in NetScaler ADC and Gateway (CVE-2026-88771 and CVE-2026-88772, CVSS 9.5) were exploited before any fix existed and are now used by many attacker gro…

CitrixVPN

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 RLSA-2023-2589 autotrace Moderate Heap-Buffer Overflow

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 RLSA-2023-2589 Autotrace Moderate Heap Buffer Overflow Alert

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 9 autotrace Moderate Heap Overflow Vuln RLSA-2023-2589

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Rocky Linux: RLSA-2023:2589 autotrace security update Security Advisories Updates

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 Autotrace Moderate Heap Buffer Overflow RLSA-2023-2589

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 Autotrace Moderate Buffer Overflow Fix RLSA-2023-2589

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 Autotrace Medium Severity Heap Buffer Overflow RLSA-2023-2589

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Rocky Linux: RLSA-2023:3067 autotrace security update Security Advisories Updates

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 autotrace Moderate Heap Overflow Fix RLSA-2023-3067

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 Autotrace Moderate Buffer Overflow Fix RLSA-2023-3067

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 RLSA-2023-3067 autotrace Moderate Buffer Overflow risk

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 RLSA-2023-3067 Autotrace Moderate Heap Overflow

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Moderate Heap Buffer Overflow Fix for Rocky Linux Autotrace RLSA-2023-3067

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 9 autotrace Moderate Heap Overflow Fix RLSA-2023-2589

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 nginx-mod-brotli Critical Fixes for CVE-2026-42055

nginx-mod-headers-more: Rebuild for 1.30.3 nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-vts:

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 announces RLSA-2023-3067 for moderate autotrace overflow

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 Autotrace Moderate Heap Buffer Overflow Flaw RLSA-2023-3067

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 RLSA-2023-3067 autotrace Moderate Buffer Overflow

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux Autotrace Heap Buffer Overflow Vulnerability RLSA-2023-2589

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux autotrace Moderate Heap Buffer Overflow Fix RLSA-2023-3067

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 RLSA-2023-3067 autotrace Moderate Heap-Buffer Overflow

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 Autotrace Moderate Heap Buffer Overflow Vuln RLSA-2023-3067

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux Autotrace Moderate Heap Buffer Overflow RLSA-2023-2589

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux RLSA-2023-3067 Autotrace Moderate Heap Buffer Overflow

Moderate: autotrace security update