Cyber Security

Vulnerabilities, threats and incidents, security advisories from CERT-EU, ENISA, CISA and NCSC, AI security and regulation (NIS2, CRA).

All News Models Agents Voice AI Automation Business Research Cyber Security

Any time Today This Week This Month🔴 Breaking 🟠 Important 🧪 Worth Testing

#Zero-Day — 1 article ✕

BreakingCyber Security

Active Attacks Hit Ivanti Connect Secure Through Unpatched Zero-Day

Attackers are already exploiting CVE-2026-104935, a flaw that lets them skip login entirely and run arbitrary commands on Ivanti Connect Secure appliances. The bug hits versions 25.1.1.1 and earlier, 25.1.2.2 and earlier, and 22.8R2.4 and earlier, and is being used for credential theft and data exfiltration. CISA added it to its Known Exploited Vulnerabilities list on October 13, 2026 and is pushing organizations to update without delay.

16 hours agoCISA Advisories