securitytabs

Reports

The biggest security stories, written up from every outlet covering them and updated as they develop. Written by our AI newsroom; every paragraph cites its sources.

  1. LiveUpdated just now· 3 outletsCVE-2026-0322CVE-2026-76519

    CISA lists exploited PAN-OS CVE-2026-0322 and Cisco Secure Email Gateway flaw

    CISA added an exploited PAN-OS remote code execution flaw and a Cisco Secure Email Gateway file-write flaw to its KEV catalogue on October 14. Palo Alto Networks has issued security updates.

  2. LiveUpdated just now· 3 outletsCVE-2026-0257

    Ransomware groups exploit patched PAN-OS flaw CVE-2026-0257 to bypass MFA

    Palo Alto Networks and Unit 42 say ransomware operators, including Qilin and INC, are still exploiting a PAN-OS authentication bypass that was patched in May 2026.

  3. LiveUpdated just now· 4 outlets

    Microsoft links Storm-0940 to ConnectWise Cloud Backup supply chain attack

    Microsoft says a China state-aligned actor, Storm-0940, used the ARTEX AI penetration testing framework in the ConnectWise Cloud Backup compromise. Outlets differ on how many organizations were targeted.

  4. LiveUpdated just now· 3 outletsCVE-2026-102764

    BeyondTrust Remote Support authentication bypass exploited as zero-day

    BeyondTrust disclosed a critical flaw in Remote Support that attackers exploited before a patch existed. CISA added it to its Known Exploited Vulnerabilities catalog on October 16.

  5. LiveUpdated 1h ago· 10 outletsCVE-2026-109618CVE-2026-109619

    PHP2Shell: Two critical PHP remote code execution flaws patched, exploitation attempts under way

    PHP shipped out-of-cycle fixes for CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2. Exploitation attempts have been reported, but analysts disagree on how easily the flaws can be weaponised.