Cybersecurity news and research: vulnerabilities, ransomware, identity, cloud and software supply chains. Reported facts, practical checks and remediation you can validate.
Latest edition · 2026-11-02
VulnerabilitiesSource date: 2026-10-27
Vendor fix available · exploitation not established
FortiOS 8.0.0 and 7.6.4–7.6.6 have an improper-locking flaw that can let an unauthenticated attacker with network access disrupt the HTTPS management interface. This is an availability issue; public exploitation is not established by this advisory.
How we can help Independent exposure assessment and remediation validation
Cisco reports active exploitation of a flaw that can reload ASA/FTD devices when reachable remote-access SSL VPN uses secondary authentication in the affected tunnel group. It is a service-availability risk, not evidence of data theft.
How we can help Independent exposure assessment and remediation validation
Check Point reported limited exploitation of a pre-authentication path-traversal flaw in Quantum Security Management that can lead to arbitrary script execution. This is an older but high-priority carry-forward item, not a new November discovery.
How we can help Independent exposure assessment and remediation validation
CVE-2026-102764 allowed unauthorized file operations against affected Remote Support appliances. BeyondTrust and investigators report attacks before disclosure; patching alone cannot exclude a prior compromise.
How we can help Independent exposure assessment and remediation validation
