Blog
CVE-2026-21589 (CVSS 9.3): Atlassian Pre-Auth File Read Exploited — Jira, Confluence & Bitbucket at Risk
CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read config files — including plaintext Crowd credentials — across 8 Atlassian Data Center products. Patch now.
Read More →Fridges at 50°C: Hackers Hijack 700 Supermarkets via Legacy Danfoss OT Controllers — What India Must Do
Attackers heated 700+ French supermarket refrigerators to 50°C overnight via CVE-2025-41450/41451 in Danfoss OT controllers. Here's the technical breakdown and what India's cold chain must do now.
Read More →CVE-2026-110447 (CVSS 9.2): Nextcloud Collabora CODE Server Pre-Auth RCE Exploited — Upgrade Immediately
CVE-2026-110447, a CVSS 9.2 pre-authentication OS command injection in Nextcloud's Collabora Online Built-in CODE Server, has been actively exploited since September 2026. Attackers plant PHP web shells and harvest credentials.…
Read More →CVE-2026-102764 (CVSS 9.3): ARMORY CASTLE Exploits BeyondTrust Remote Support Zero-Day — China-Linked Hackers Deploy SAWFLY Webshell and BARECLAW Tunneler
ARMORY CASTLE (UNC5221) exploited CVE-2026-102764 in BeyondTrust Remote Support as a zero-day from 29 August 2026, deploying SAWFLY webshell and BARECLAW tunneler to harvest credentials.
Read More →The Gentlemen Ransomware: 14,700 FortiGate Devices in Their Database — Is Yours One?
The Gentlemen ransomware group has pre-compromised 14,700 FortiGate devices using CVE-2024-55591. With 480+ victims and a 90% affiliate model, this FortiGate-first RaaS is a critical threat to Indian enterprises.
Read More →CVE-2026-97229 (CVSS 10.0): GitLab CI/CD Zero-Day — Unauthenticated RCE with Public Exploit Out
CVE-2026-97229 is a CVSS 10.0 unauthenticated RCE in GitLab's CI/CD regex compiler. A public exploit exists — self-managed instances must patch to 19.4.2, 19.3.5 or 19.2.8 immediately.
Read More →CVE-2026-0322 (CVSS 8.6): Palo Alto PAN-OS Management Interface RCE Actively Exploited — Patch Now
Palo Alto Networks confirms CVE-2026-0322, a CVSS 8.6 code injection flaw in PAN-OS, is actively exploited. CISA deadline is 17 October 2026. Patch PA-Series and VM-Series firewalls immediately.
Read More →FortiBleed: FBI Warns 86,644 FortiGate Firewalls Compromised — Is Your Network Next?
The FBI and USSS confirm FortiBleed is still active: 86,644 FortiGate devices compromised across 194 countries, no CVE needed, linked to INC, Lynx, and Payload ransomware. Here's what to do…
Read More →CVE-2026-76519 (CVSS 9.8): Cisco Secure Email Gateway Zero-Day Exploited in the Wild — Patch Now
CVE-2026-76519, a CVSS 9.8 zero-day in Cisco Secure Email Gateway, lets unauthenticated attackers gain root access via a malicious email attachment. CISA added it to KEV. Patch now.
Read More →CVE-2026-104935 (CVSS 8.6): Ivanti Connect Secure Zero-Day Chains to Root — UTA0576 Steals AD Credentials, LAPS Passwords and BitLocker Keys
CVE-2026-104935 lets UTA0576 chain three zero-days to root on Ivanti Connect Secure VPNs, stealing AD credentials, LAPS passwords and BitLocker keys. Patch to 22.8R2.5 or 25.1.3.x now.
Read More →