blog

Fortinet is telling FortiMail customers to act now: CVE-2026-104286, a critical path traversal flaw in the appliance’s Identity-Based Encryption (IBE) component, is being actively exploited, and there is still no official patch. The bug…

Sucuri has documented a WordPress compromise where the attackers did not just drop a backdoor, they spread it across eight places at once: files, the database, and shared memory. Each of those places can…

Attackers have found another way to cash in on the trust people place in AI platforms. In late September 2026, Huntress spotted a campaign in which custom ChatGPT assistants (Custom GPTs) posed as an…

The NetScaler flaw that CISA confirmed as actively exploited last week is now under mass exploitation by multiple independent threat actors, and the full post-exploitation chain is public. CVE-2026-88772 (CVSS 9.5) is a pre-authentication…