The Federal Bureau of Investigation has removed an Accenture contractor after a security patch failure on an Oracle PeopleSoft platform allowed the ShinyHunters cybercrime group to breach the bureau's job portal and steal employee personal
A critical vulnerability (CVE-2026-21589) in eight Atlassian Data Center products allows unauthenticated attackers to read specific files from the web application root directory. Atlassian rated the flaw 9.3 out of 10 and has released fixed
A critical path traversal vulnerability in Fortinet FortiMail, tracked as CVE-2026-104286, is under active exploitation. The zero-day could allow attackers to write arbitrary files and potentially achieve remote code execution. CISA and Fortinet have issued
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning after a critical zero-day vulnerability in Fortinet FortiMail email security appliances was found under active exploitation. Tracked as CVE-2026-104286, the flaw allows unauthenticated
Cisco has issued urgent patches for a critical zero-day vulnerability (CVE-2026-76504) in its Catalyst SD-WAN Manager. The flaw, which allows remote, unauthenticated administrative access, is confirmed to be under active exploitation by attackers. CISA has
