Qilin and INC Ransomware Groups Continue Exploiting Patched Palo Alto Flaw, Now Pivoting Directly to Virtualization Layer (CVE-2026-0257)

Scope: Palo Alto Networks PAN-OS and Prisma Access (patched since May 2026)

Severity: Amber

Read More

Oracle Releases October 2026 Critical Patch Update With 109 PeopleSoft Fixes Alone

Scope: Oracle Database, E-Business Suite, PeopleSoft, Oracle Communications, Oracle Analytics, Oracle Systems, and other Oracle product lines

Severity: Red

Read More

Redis RESTORE Command Flaw Exploited Five Months After Patch Was Available (CVE-2026-25243)

Scope: Redis redis-server, all versions prior to 8.6.3 (fixed in 6.2.22, 7.2.14, 7.4.9, and 8.2.6 or later for other branches)

Severity: Amber

Read More

Siemens Confirms Software Center DLL Sideloading Flaw Exploited to Smuggle Malware via a Trusted Signed App (CVE-2026-110936)

Scope: Siemens Software Center, all versions prior to V4.0.9.8

Severity: Amber

Read More

SiteGuard WAF Command Injection Under Active Exploitation Grants Root and SYSTEM Access (CVE-2026-106931)

Scope: SiteGuard Server Edition Web Application Firewall, host-based instances with the statistics function enabled

Severity: Red

Read More

China-Nexus Group Exploited BeyondTrust Remote Support Zero-Day Since 2023, Federal Deadline Today (CVE-2026-102764)

Scope: BeyondTrust Remote Support (formerly Bomgar), self-hosted appliances (SaaS customers already patched as of October 9)

Severity: Red

Read More