Round-ups of significant threats, actively exploited vulnerabilities, and security advisories, with practical steps to consider.
Awareness content, not a monitored service.
Atlassian Data Center flaw CVE-2026-21589 (Jira, Confluence, Bitbucket, and more) is being exploited: upgrade self-hosted instances now or restrict internet access.
Citrix patches another exploited NetScaler flaw, FortiMail and Zammad zero-days are in KEV, and Star Blizzard and Warlock ransomware campaigns hit UK and European targets.
Fortinet FortiMail flaw CVE-2026-104286 (CVSS 9.8) is being actively exploited: upgrade now, or disable IBE and restrict management access, then check for compromise.
Cisco Catalyst SD-WAN Manager flaw CVE-2026-76504 (CVSS 9.8) is under active attack: upgrade to a fixed release now, check logs for compromise, and restrict management access.
Citrix NetScaler and Check Point VPN flaws under active attack, a WordPress core fix, a SharePoint exploit, and an Apple zero-day.