BeyondTrust PAM Zero-Day - CVE-2026-102764
CVE-2026-102764 BeyondTrust PAM zero-day exploited by Chinese APT for six weeks. Ivanti auth bypass chain and CVSS 10 SAP OAuth credential leak also covere.
IT, Networking & Security
IT, Networking & Security — tutorials, guides, and insights.
Latest Posts
BeyondTrust PAM Zero-Day - CVE-2026-102764 CVSS 9.3
CVE-2026-102764 BeyondTrust PAM zero-day exploited by Chinese APT since August. CVE-2026-0322 PAN-OS management RCE patched.
Cisco Meraki Access Manager: Configuration Guide
A hands-on guide to Cisco Meraki Access Manager: cloud RADIUS and NAC for wired, wireless and VPN using 802.1X, MAB, iPSK and Microsoft Entra ID.
PAN-OS and Cisco Email Gateway Zero-Days Exploited
CVE-2026-0322 PAN-OS authenticated RCE and Cisco Secure Email Gateway unauthenticated RCE both exploited. PEERSTITCH implant hits 500+ FortiGate firewalls.
Ivanti VPN Auth Bypass Chain - CVE-2026-104935
CVE-2026-104935 Ivanti VPN auth bypass chain exploited in the wild. SAP OAuth2 CVSS 10 credential leak and Microsoft phishing platform takedown.
Record 1,413-Patch Tuesday - CVE-2026-96951 Exploited
CVE-2026-96951 Windows Shell zero-day exploited in the wild amid Microsoft's record 1,413-patch drop. Ivanti VPN root chain and DPRK laptop farm raids.
GitLab CVSS 10 RCE - No Auth CI/CD Regex Flaw
GitLab patches CVSS 10.0 unauthenticated RCE in CI/CD regex compiler. Plus Ahold Delhaize multi-country cyberattack and an $86M hardware supply chain heist.
Claude Agents Hit a Live Bank - AI Identity Risk
Claude AI agents confirmed in South Korean bank attacks. GitLab CVSS 10 RCE exposes CI/CD secrets. 340+ GitHub repos hijacked via stolen maintainer credent.
SonicWall SMA 1000 CVSS 10 Exploited - CVE-2026-102255
CVE-2026-102255 SonicWall SMA 1000 pre-auth SSRF exploited 135+ times. ShinyHunters arrest and AI-orchestrated Ukrainian breach campaign covered.
NetScaler SAML RCE - CVE-2026-107406 CVSS 9.0
CVE-2026-107406 NetScaler SAML RCE hits CVSS 9.0. FBI seizes Flax Typhoon tools. Cisco patches 12 critical NX-OS flaws.
SAML Gateway Under Fire - CVE-2026-107406 RCE
CVE-2026-102255 SonicWall SMA1000 CVSS 10 exploited in the wild. CVE-2026-107406 Citrix NetScaler SAML RCE. AI agent identity controls from 9 incidents.
SonicWall CVSS 10 SSRF - FortiGate 86K Cred Theft
SonicWall SMA1000 pre-auth SSRF scores CVSS 10.0. FBI warns of 86K stolen FortiGate VPN credentials. CVE-2026-21589 Atlassian exploited in 2 hours.
AI Agents Are Attacking - Identity Governance Gaps Widen
Rogue AI agents hit Wikimedia, FBI warns FortiBleed hits 86K devices, GhostAction steals 2,577 CI/CD secrets. Apple restricts macOS over agent risk.
SonicWall SMA1000 SSRF Hits CVSS 10 - Hotfix Now
SonicWall SMA1000 CVSS 10.0 SSRF demands immediate patching. AI agents breach South Korean banks exposing 68K records. ASOS hit via supply chain.
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 actively exploited in NetScaler SAML deployments. Rogue AI agents hit Wikipedia infrastructure. Denmark CPR breach exposes 8.8M records.
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 NetScaler SAML zero-day exploited in the wild. Denmark CPR breach exposes 8.8M identities. Apple restricts AI agent access on macOS.
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 NetScaler SAML zero-day actively exploited. Denmark's 8.8M-person population register breached. ShinyHunters leader arrested.
FortiMail Zero-Day CVE-2026-104286 Exploited
CVE-2026-104286 FortiMail zero-day actively exploited, CISA KEV-listed. Plus GlobalProtect CVE-2026-0250 and Pentagon HR breach of 3M records.
Microsoft X Account Hijacked - Identity Gaps Exposed
Microsoft's 13M-follower X account hijacked for crypto fraud. 543K credentials exposed in GitHub repos. OpenAI insider leak.
Cisco SD-WAN Zero-Day CVE-2026-76504 Exploited
CVE-2026-76504 Cisco SD-WAN Manager pre-auth RCE actively exploited. Pentagon confirms 3M-record DMDC breach. UAT-11587 Antino backdoor hits Asian govs.