Cyber Threat Brief
By Carolina Clear Tech, LLC
Listen to a podcast, please open Podcast Republic app. Available on Google Play Store and Apple App Store.
Image by Carolina Clear Tech, LLC
Category: Technology
Open in Apple Podcasts
Open RSS feed
Open Website
Rate for this podcast
Subscribers: 0
Reviews: 0
Episodes: 90
Description
Your daily cybersecurity briefing. Vulnerabilities, ransomware, threat actors, and patches that matter, explained for IT professionals and business leaders protecting small and mid-sized organizations. From Carolina Clear Tech.
| Episode | Date |
|---|---|
|
2026-11-05: Zyxel GS1900 switches need 2.90 Patch 3, because Binarly found that Patch 2 does not stop the
|
Nov 05, 2026 |
|
2026-11-04: CISA confirmed exploitation of WordPress Core CVE-2026-119977
|
Nov 04, 2026 |
|
2026-11-03: Synology warns that attackers are encrypting outdated DSM systems
|
Nov 03, 2026 |
|
2026-11-02: Ivanti Connect Secure needs another upgrade to close an actively exploited three-flaw chain; the
|
Nov 02, 2026 |
|
2026-11-01: Canonical's LXD and MicroCloud authentication flaw, CVE-2026-112816
|
Nov 01, 2026 |
|
2026-10-31: Attackers are chaining PHP2Shell and Fragnesia to root PAN-OS firewalls
|
Oct 31, 2026 |
|
2026-10-30: Actively exploited GitLab RCE and Cisco ASA/FTD VPN vulnerabilities carry November 1 federal KEV
|
Oct 30, 2026 |
|
2026-10-29: PHP2Shell exploitation is reaching firewall management systems and Active Directory; the KEV
|
Oct 29, 2026 |
|
2026-10-28: Prioritize exploited Brotli and Adobe Commerce flaws
|
Oct 28, 2026 |
|
2026-10-27: CISA confirmed exploitation of PHP2Shell, with federal remediation due October 29; prioritize
|
Oct 27, 2026 |
|
2026-10-26: Prioritize Microsoft 365 session-theft investigations, GitHub Actions secret exposure
|
Oct 26, 2026 |
|
2026-10-25: LiteLLM says attackers used an unrevoked master key to hijack its release pipeline and publish
|
Oct 25, 2026 |
|
2026-10-24: Actively exploited Collabora CODE Server and Arista VeloCloud Orchestrator flaws have October 26
|
Oct 24, 2026 |
|
2026-10-23: Patch actively exploited VeloCloud Orchestrator systems and investigate ConnectWise application
|
Oct 23, 2026 |
|
2026-10-22: Patch PHP2Shell immediately
|
Oct 22, 2026 |
|
2026-10-21: PHP has released emergency security updates for PHP2Shell
|
Oct 21, 2026 |
|
2026-10-20: Review Microsoft 365 tenants exposed through ConnectWise Cloud Backup identities and maintain
|
Oct 20, 2026 |
|
2026-10-19: ConnectWise's October 19 status update keeps Cloud Backup, SaaS Security
|
Oct 19, 2026 |
|
2026-10-18: ConnectWise's October 18 advisory describes a continuing Cloud Backup interruption following
|
Oct 18, 2026 |
|
Cyber Threat Brief for 2026-10-17
|
Oct 17, 2026 |
|
2026-10-16: Verify BeyondTrust Remote Support patch BT26-05-RS and investigate prior access
|
Oct 16, 2026 |
|
2026-10-15: Ivanti Connect Secure faces active zero-day attacks with 105 honeypot hits logged
|
Oct 15, 2026 |
|
2026-10-14: Microsoft's October 2026 Patch Tuesday breaks all records with 1,413 CVEs
|
Oct 14, 2026 |
|
2026-10-13: SonicWall SMA 1000 devices are under active attack via CVE-2026-102255
|
Oct 13, 2026 |
|
2026-10-12: FortiBleed credential harvesting continues against 86,000+ Fortinet devices with FBI warning active
|
Oct 12, 2026 |
|
2026-10-11: The FBI arrested Edward Dubrovsky, a Canadian ransomware negotiation executive
|
Oct 11, 2026 |
|
2026-10-10: Flax Typhoon is exploiting eight known flaws (Exchange password spraying, VPN persistence
|
Oct 10, 2026 |
|
2026-10-09: Threat actors are exploiting AhsayCBS backup server flaws (CVE-2026-105133 and CVE-2026-105134) for
|
Oct 09, 2026 |
|
2026-10-08: FBI and USSS warn the FortiBleed campaign is still active against FortiGate firewalls and SSL VPNs
|
Oct 08, 2026 |
|
2026-10-07: FortiBleed remains an active ransomware entry point as FBI confirms credentials can lock
|
Oct 07, 2026 |
|
2026-10-06: Citrix confirms a third NetScaler zero-day in under two weeks (CVE-2026-88779
|
Oct 06, 2026 |
|
2026-10-05: Citrix NetScaler zero-day CVE-2026-88779 is under active exploitation just days after two other
|
Oct 05, 2026 |
|
2026-10-04: ShinyHunters operator "Rey" is cooperating with FBI from detention in Jordan as the group's arrest
|
Oct 04, 2026 |
|
2026-10-03: Fortinet warns of active exploitation of a critical FortiMail zero-day allowing unauthenticated
|
Oct 03, 2026 |
|
2026-10-02: Fortinet FortiMail zero-day is under active exploitation with CISA setting an October 4 patch
|
Oct 02, 2026 |
|
2026-10-01: Cisco warns of active exploitation of a critical SD-WAN Manager zero-day with no workaround
|
Oct 01, 2026 |
|
2026-09-30: Two Citrix NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772 (both CVSS 9.5)
|
Sep 30, 2026 |
|
2026-09-29: Citrix confirmed two critical NetScaler zero-days actively exploited in the wild
|
Sep 29, 2026 |
|
2026-09-28: Citrix NetScaler faces active exploitation of two critical zero-days (CVE-2026-88771 and
|
Sep 28, 2026 |
|
2026-09-27: Two unpatched Citrix NetScaler RCE zero-days are under active exploitation with no fix available
|
Sep 27, 2026 |
|
2026-09-26: CISA added two actively exploited flaws affecting SharePoint and MikroTik routers to the KEV
|
Sep 26, 2026 |
|
2026-09-25: CISA added two actively exploited vulnerabilities to its KEV catalog with a Friday deadline
|
Sep 25, 2026 |
|
2026-09-24: F5 BIG-IP APM has a critical zero-day under active exploitation with a Friday federal patch deadline
|
Sep 24, 2026 |
|
2026-09-23: A Microsoft Defender zero-day blocks platform updates by filling disk space
|
Sep 23, 2026 |
|
2026-09-22: ShinyHunters hijacked Clop's leak site and is threatening to expose ransom payment records from the
|
Sep 22, 2026 |
|
2026-09-21: PAYLOAD ransomware weaponizes Active Directory Group Policy to deploy ransom notes domain-wide
|
Sep 21, 2026 |
|
2026-09-20: ShinyHunters breached Clop's leak site using a Grav CMS exploit
|
Sep 20, 2026 |
|
2026-09-19: Cisco patched a maximum-severity zero-day in Identity Services Engine under active exploitation
|
Sep 19, 2026 |
|
2026-09-18: Cisco disclosed a second actively exploited zero-day this week, CVE-2026-76460
|
Sep 18, 2026 |
|
2026-09-17: Cisco ISE has a CVSS 10 authentication bypass zero-day (CVE-2026-76460) under active exploitation
|
Sep 17, 2026 |
|
2026-09-16: Cisco discloses a critical zero-day in Secure Email Gateway already exploited in the wild with
|
Sep 16, 2026 |
|
2026-09-15: Cisco Secure Email Gateway zero-day actively exploited for root command execution
|
Sep 15, 2026 |
|
2026-09-14: ConnectWise ScreenConnect faces active worm-like exploitation with CISA adding CVE-2026-84869 to
|
Sep 14, 2026 |
|
2026-09-13: CISA added five actively exploited flaws to the KEV catalog with patch deadlines through September
|
Sep 13, 2026 |
|
2026-09-12: Check Point patches four critical VPN flaws including two on CISA's KEV list
|
Sep 12, 2026 |
|
2026-09-11: Cisco firewalls are under attack by state-sponsored groups and Qilin ransomware
|
Sep 11, 2026 |
|
2026-09-10: Multiple Chinese espionage groups are rapidly exploiting a Chrome/Windows zero-day chain
|
Sep 10, 2026 |
|
2026-09-09: Microsoft breaks records with 974 vulnerabilities including two actively exploited zero-days
|
Sep 09, 2026 |
|
2026-09-08: Google patched a Chrome zero-day already under active exploit
|
Sep 08, 2026 |
|
2026-09-07: N-able issued its fourth emergency hotfix in five weeks for a maximum-severity RCE flaw in
|
Sep 07, 2026 |
|
2026-09-06: ShipMonk breach exposes 67,000 Trezor customers via zero-day SQL injection
|
Sep 06, 2026 |
|
2026-09-05: Google patches its sixth Chrome zero-day of 2026 with a September 18 federal deadline
|
Sep 05, 2026 |
|
2026-09-04: Google patches a seventh Chrome zero-day exploited in the wild
|
Sep 04, 2026 |
|
2026-09-03: SonicWall SMA 1000 devices face active zero-day exploitation with CISA deadlines this week
|
Sep 03, 2026 |
|
2026-09-02: SonicWall disclosed two SMA1000 zero-days (CVSS 10 and 7.8) exploited in the wild, patch immediately
|
Sep 02, 2026 |
|
2026-09-01: PaperCut flaws escalate from scanning to hands-on exploitation with September 14 CISA deadline
|
Sep 01, 2026 |
|
2026-08-31: Two PaperCut zero-days (CVE-2026-81578, CVE-2026-82078) are under active exploitation against print
|
Aug 31, 2026 |
|
2026-08-30: A new ClickFix variant called TerminalFix is deploying reverse-tunnel backdoors through fake
|
Aug 30, 2026 |
|
2026-08-29: PaperCut NG/MF is under active exploitation with a pre-auth RCE chain -- patch immediately or pull
|
Aug 29, 2026 |
|
2026-08-28: PaperCut ships emergency patches for an actively exploited zero-day hitting all NG/MF versions
|
Aug 28, 2026 |
|
2026-08-27: CISA adds six exploited vulnerabilities to its KEV catalog
|
Aug 27, 2026 |
|
2026-08-26: CISA adds actively exploited Gitea RCE to KEV catalog with a Thursday patch deadline
|
Aug 26, 2026 |
|
2026-08-25: Federal agencies have 48 hours to patch a critical Oracle WebLogic flaw already under active
|
Aug 25, 2026 |
|
2026-08-24: Chinese cybercrime group UAT-10147 is using AI tools to automate exploitation of known
|
Aug 24, 2026 |
|
2026-08-23: Hardware manufacturers accelerate post-quantum cryptography deployment as quantum threats loom
|
Aug 23, 2026 |
|
2026-08-22: CISA adds critical Windows IKE and Zimbra command injection flaws to the KEV catalog with patch
|
Aug 22, 2026 |
|
2026-08-21: CISA added six actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog
|
Aug 21, 2026 |
|
2026-08-18: Lazarus Group exploits a new Windows zero-day to drop backdoors on defense contractors
|
Aug 18, 2026 |
|
2026-08-17: SAP Commerce Cloud's critical zero-day is under active exploit just three days after disclosure
|
Aug 17, 2026 |
|
2026-08-16: ChainDrop worm infiltrates npm supply chain with evasion tactics that bypass standard defenses
|
Aug 16, 2026 |
|
2026-08-15: Microsoft Defender zero-day "ShieldBreak" (CVE-2026-69414) is unpatched and under active advisory
|
Aug 15, 2026 |
|
2026-08-14: GeoServer zero-day exploited within hours of disclosure
|
Aug 14, 2026 |
|
2026-08-13: Microsoft SharePoint is under active attack just days after a PoC dropped
|
Aug 13, 2026 |
|
2026-08-12: Microsoft's August Patch Tuesday drops 421 CVEs with one actively exploited zero-day
|
Aug 12, 2026 |
|
2026-08-10: CISA adds Progress LoadMaster RCE to KEV with a 3-day patch deadline
|
Aug 10, 2026 |
|
2026-08-09: Atlassian's Rovo AI exposed enterprise data through a one-click parameter injection flaw that let
|
Aug 09, 2026 |
|
2026-08-08: N-able releases second emergency hotfix as attackers persist in customer networks via Cloudflare
|
Aug 08, 2026 |
|
2026-08-07: Malware can silently abuse Windows Hello keys for persistent Entra ID access without triggering
|
Aug 07, 2026 |
|
2026-08-06: JetBrains TeamCity CVE-2026-63077 added to CISA KEV with federal agencies facing an August 8
|
Aug 06, 2026 |
|
2026-08-05: INC ransomware is actively exploiting the SonicWall zero-day pair with rapid deployment times
|
Aug 05, 2026 |