Vulnerabilities
Cisco Patches an Actively Exploited Catalyst SD-WAN Manager Flaw (CVE-2026-20262)
Patch verification across Catalyst SD-WAN Manager deployments is the high-priority cycle this week.
Vulnerabilities
Council of Europe Confirms It Is Investigating Reported Breach Claims
The Oracle PeopleSoft campaign coverage extends into a major European intergovernmental institution.
Policy & Government
A Defender's Implementation Guide to CISA BOD 26-04: Patching by Risk, Not Severity
BOD 26-04 reaches beyond direct CISA jurisdiction — federally regulated industries, contractors, and state and local defenders now have a new benchmark for what good looks like.
Vulnerabilities
Splunk Discloses Critical Splunk Enterprise Vulnerability
The SIEM at the center of many SOCs gets a critical-priority patch — verify deployments.
Vulnerabilities
Ivanti Sentry Critical Flaws Exploited 24 Hours After Disclosure
Twenty-four hours separated disclosure from in-the-wild exploitation — CISA's emergency directive gives federal agencies three days to patch.
Vulnerabilities
ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) — 100+ Organizations Breached
Google Threat Intelligence confirmed mass exploitation of an Oracle PeopleSoft zero-day by ShinyHunters; universities are the primary target and the extortion has begun.
Vulnerabilities
Microsoft's Record 206-CVE Patch Tuesday and the Nightmare Eclipse Zero-Days
The largest Patch Tuesday on record arrives with three publicly disclosed zero-days — and a running feud with one researcher producing a steady stream of Microsoft exploits.
Vulnerabilities
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild — Patch Now
The fifth in-the-wild Chrome zero-day of the year, in the V8 JavaScript engine, is now patched — but the attack pattern shows no sign of slowing.
Vulnerabilities
LiteLLM Project Patches CVE-2026-42271
An AI proxy that increasingly sits between corporate apps and model providers issues a patch — defenders should verify deployments and review proxy logs.
Vulnerabilities
Veeam Discloses Veeam Backup & Replication Remote Code Execution Vulnerability
A patch cycle on the backup-of-record for the enterprise — high-priority, given the ransomware-response context.
Vulnerabilities
One-Character Linux Kernel Flaw Gets Public Root Exploit
A use-after-free in the Linux kernel's nf_tables code — patched in February, exploited publicly in June — shows how a single misplaced character in a critical subsystem becomes the keystone of a privilege-escalation chain.
Vulnerabilities
Check Point VPN Zero-Day CVE-2026-50751 Exploited for a Month Before Patch; Qilin Ransomware Involved
A logic-flow weakness in Check Point's Remote Access VPN gave a Qilin ransomware affiliate and other attackers a month to operate before a patch arrived.