Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Oct 16, 2026 · SecurityWeek

    Critical Vulnerabilities Patched by F5 and Juniper Networks

    F5 and Juniper Networks have released patches addressing critical vulnerabilities that could allow remote code execution and complete device control.

    What changed

    F5 and Juniper Networks have issued important security updates to mitigate critical vulnerabilities in their products. These vulnerabilities, if exploited, could enable attackers to execute arbitrary code remotely, potentially leading to a complete takeover of affected devices.

    Who is affected

    Organizations utilizing products from F5 and Juniper Networks may be at risk due to these vulnerabilities. Prompt action is necessary to secure systems and prevent potential exploitation.

    • F5 Networks products, including application delivery controllers and security solutions.
    • Juniper Networks routers and switches that are part of enterprise networks.
    • Any organizations relying on these vendors for network infrastructure and security.

    What to do

    Security teams should prioritize the application of the latest patches provided by F5 and Juniper Networks. Conduct thorough assessments of network devices to identify any that may be vulnerable.

    • Review and apply the latest security updates from F5 and Juniper Networks immediately.
    • Monitor network traffic for any suspicious activity that may indicate exploitation attempts.
    • Educate staff about the importance of maintaining updated systems to mitigate risks.

    Original report

  2. Research · Oct 16, 2026 · The Hacker News

    Critical Zero-Day Vulnerability in BeyondTrust Remote Support Exploited by China-Linked Hackers

    A zero-day vulnerability in BeyondTrust Remote Support has been exploited by a China-linked cyber espionage group, posing significant risks to organizations using the software.

    What changed

    A serious vulnerability, identified as CVE-2026-102764, has been discovered in BeyondTrust Remote Support, previously known as Bomgar. This flaw, which has a CVSS score of 9.3, involves improper origin validation within an internal messaging component, allowing unauthorized access to remote support servers.

    The exploitation of this zero-day vulnerability was reported to have occurred in late August 2026, with the cyber espionage group Armory Castle, also known as UNC5221 or Warp Panda, actively leveraging it for unauthorized access.

    Who is affected

    Organizations utilizing BeyondTrust Remote Support are at risk due to this vulnerability. The potential impact includes unauthorized access to sensitive systems and data.

    This vulnerability could affect a wide range of sectors, particularly those relying on remote support solutions for operational continuity.

    • BeyondTrust Remote Support users
    • Organizations in sectors such as IT, finance, and healthcare
    • Companies with remote workforce solutions
    • Any entity utilizing remote access tools for support services

    What to do

    Immediate action is recommended for organizations using BeyondTrust Remote Support. Security teams should assess their systems for the presence of this vulnerability and apply any available patches or mitigations.

    Additionally, monitoring for unusual activity on remote support servers is crucial to detect any potential exploitation attempts.

    • Review and apply patches from BeyondTrust as soon as they are available.
    • Implement network segmentation to limit exposure of remote support servers.
    • Enhance monitoring and logging of access to remote support systems.
    • Educate staff on recognizing suspicious activity related to remote access.

    Original report