ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match words in the title. Separate terms with spaces.

  1. Oct 16, 2026 · Security Affairs

    Critical Atlassian Flaw Added to CISA's Exploited Vulnerabilities Catalog

    CISA has included a critical vulnerability in Atlassian products in its Known Exploited Vulnerabilities catalog, highlighting an ongoing threat to users.

    What changed

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical vulnerability in Atlassian products, identified as CVE-2026-21589, to its Known Exploited Vulnerabilities (KEV) catalog. This vulnerability has a CVSS score of 9.3, indicating its severity.

    Exploitation of this flaw began in early October, prompting immediate attention from security professionals and organizations using Atlassian software.

    Who is affected

    Organizations utilizing Atlassian products are at risk due to this vulnerability. This includes a wide range of users from various sectors, making it a significant concern for many.

    The following groups are particularly impacted:

    • Users of Atlassian Jira Software
    • Users of Atlassian Confluence
    • Organizations in the technology and project management sectors
    • Any entity relying on Atlassian tools for collaboration and project tracking

    What to do

    Security teams should prioritize assessing their exposure to CVE-2026-21589 and take immediate action to mitigate risks. It is crucial to implement any available patches or updates provided by Atlassian.

    Additionally, organizations should monitor their systems for any signs of exploitation and enhance their security posture accordingly.

    • Review and apply security updates from Atlassian as soon as possible.
    • Conduct a thorough assessment of systems for potential exploitation.
    • Enhance monitoring for unusual activity related to Atlassian products.
    • Stay informed about further developments regarding this vulnerability through CISA and other security advisories.

    Original report

  2. Oct 16, 2026 · Infosecurity Magazine

    China Espionage Actor Exploiting BeyondTrust Vulnerability

    A newly disclosed vulnerability in BeyondTrust products is being actively exploited by a suspected Chinese espionage group, raising concerns for organizations using these solutions.

    What changed

    A critical vulnerability in BeyondTrust products has been disclosed, and it is reportedly being exploited by the suspected PRC-aligned group Armory Castle. This group is known for its long-term persistence tactics, which pose significant risks to affected organizations.

    Who is affected

    Organizations utilizing BeyondTrust products are at risk due to this vulnerability. The exploitation by Armory Castle highlights the need for immediate attention to security measures.

    This situation particularly affects sectors where BeyondTrust solutions are deployed, including IT management, security operations, and identity management.

    • BeyondTrust Privilege Management
    • BeyondTrust Remote Support
    • Organizations in critical infrastructure sectors

    What to do

    Security teams should prioritize assessing their systems for the vulnerability in BeyondTrust products and implement necessary patches or mitigations as soon as they are available. Continuous monitoring for suspicious activity is also recommended.

    Engaging with threat intelligence sources to stay updated on the latest developments regarding Armory Castle's activities will enhance defensive strategies.

    • Review and apply any available security patches from BeyondTrust.
    • Conduct a thorough risk assessment of systems using BeyondTrust solutions.
    • Enhance monitoring for indicators of compromise related to Armory Castle.

    Original report