-
#StopRansomware: Gunra Ransomware | CISA
Advisory at a Glance Title #StopRansomware: Gunra Ransomware Original Publication August 10, 2026 Executive Summary Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other…
-
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Executive summary A group of Russian state-supported cyber actors has been targeting and compromising various Western government…
-
Vulnerability Chain in WordPress Core Could Allow Remote Code Execution
MS-ISAC NOTICE NUMBER: 2026-070 ISSUE DATE(S): 07/18/2026 PREVIEW: A vulnerability chain has been discovered in WordPress Core that could allow remote code execution. WordPress is an open source content management…
-
CISA adds three known exploited vulnerabilities to its catalog
CISA has added three new vulnerabilities to its Catalog of Known Exploited Vulnerabilities (KEV), based on evidence of active exploitation. CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-39808 Fortinet FortiSandbox…
-
Several vulnerabilities in Adobe products could allow execution of arbitrary code
Several vulnerabilities have been discovered in Adobe products, the most serious of which could allow the execution of arbitrary code. The details of these vulnerabilities are as follows: Tactical: Execution…
-
Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting
Russian Government-Sponsored Activity Targets Poorly Configured and Vulnerable Devices Across Critical Sectors Executive summary Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable…
-
Several vulnerabilities in Adobe products could allow execution of arbitrary code
MS-ISAC NOTICE NUMBER: 2026-066 ISSUE DATE(S): 01/07/2026 PREVIEW: Several vulnerabilities have been discovered in Adobe products, the most serious of which could allow the execution of arbitrary code. Adobe Campaign…
-
CISA adds known exploited vulnerability to its catalog
CISA has added a new vulnerability to its Catalog of Known Exploited Vulnerabilities (KEV), based on evidence of active exploitation. This type of vulnerability is a common attack vector for…
-
Several vulnerabilities in Google Chrome could allow arbitrary code execution
MS-ISAC NOTICE NUMBER: 2026-063 ISSUE DATE(S): 06/26/2026 PREVIEW: Several vulnerabilities have been discovered in Google Chrome, the most serious of which could allow the execution of arbitrary code. Successful exploitation…
