ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

  1. Oct 16, 2026 · Dark Reading

    BeyondTrust Remote Support Zero-Day Vulnerability Discovered

    A newly identified zero-day vulnerability in BeyondTrust Remote Support highlights ongoing security concerns with edge devices, following similar issues reported by Ivanti, Cisco, and Palo Alto Networks.

    What changed

    A zero-day vulnerability has been discovered in BeyondTrust Remote Support, contributing to a troubling trend of security flaws in edge devices. This vulnerability poses significant risks to organizations relying on these tools for remote support and management.

    Who is affected

    Organizations utilizing BeyondTrust Remote Support are at risk, particularly those in sectors that depend heavily on remote access solutions. The vulnerability could potentially allow unauthorized access to sensitive systems.

    This issue is part of a broader pattern, as similar vulnerabilities have recently been identified in products from other vendors.

    • BeyondTrust Remote Support users
    • Organizations using Ivanti products
    • Cisco edge device customers
    • Palo Alto Networks clients

    What to do

    Security teams should prioritize monitoring for any unusual activity related to BeyondTrust Remote Support. Immediate steps should include reviewing access logs and ensuring that all systems are updated with the latest security patches.

    Organizations should also consider implementing additional security measures, such as network segmentation and enhanced authentication protocols, to mitigate potential risks.

    Original report

  2. Oct 16, 2026 · BleepingComputer

    Critical Vulnerability Discovered in Magento and Adobe Commerce

    A severe vulnerability affecting Magento and Adobe Commerce could enable attackers to execute arbitrary code, posing significant risks to online stores.

    What changed

    A critical vulnerability identified as CVE-2026-103849 has been discovered in the BlockStrap component of Magento and Adobe Commerce. This flaw could allow unauthorized users to execute arbitrary PHP code on affected servers, leading to potential data breaches and service disruptions.

    Researchers have raised alarms about the likelihood of exploitation, urging immediate attention from affected parties.

    Who is affected

    The following products and their users are at risk due to this vulnerability:

    Magento and Adobe Commerce users should be particularly vigilant, as they are directly impacted by this critical flaw.

    • Magento 2.x versions
    • Adobe Commerce versions
    • E-commerce businesses utilizing these platforms

    What to do

    Organizations using Magento or Adobe Commerce should take immediate action to mitigate risks associated with this vulnerability. It is crucial to monitor for any unusual activity and apply security patches as soon as they become available.

    Additionally, consider reviewing security protocols and enhancing monitoring systems to detect potential exploitation attempts.

    • Stay updated on patches from Adobe and Magento.
    • Implement additional security measures to safeguard against unauthorized access.
    • Regularly audit server configurations and access logs.

    Original report