Data & infrastructure
-
Fortinet fixes privileged access weaknesses
Fortinet has patched critical vulnerabilities affecting FortiMonitorOnSight and its Privileged Access Agent Chrome extension, including authentication bypass and browser-traffic proxy risks.
-
Ivanti patches critical IT management flaws
Ivanti has issued September fixes for vulnerabilities across Neurons for ITSM, Endpoint Manager Mobile and Sentry, including critical remote code execution weaknesses.
-
Cisco firewall flaws exploited in active attacks
Cisco Talos has confirmed exploitation of two Secure Firewall Management Center vulnerabilities across intrusions involving state-linked activity and a ransomware operator.
-
N-able confirms separate N-central flaw exploited
N-able says a newly identified N-central vulnerability has been exploited in the wild, days after customers were told to patch other serious flaws in the remote-management platform.
-
Google sees attackers adopt agentic workflows
Google says adversaries are moving from basic AI prompting towards agent-enabled cyber operations that can accelerate credential harvesting, cloud abuse, and software supply chain activity.
-
Researchers detail closed ChatGPT cross-account channel
Check Point has disclosed a now-closed ChatGPT cross-account channel that used shared internal package infrastructure to relay hidden tasks and data between isolated execution environments.
-
Microsoft fixes two exploited Windows zero-days
Microsoft’s September Patch Tuesday fixes two exploited privilege-escalation zero-days amid its largest monthly security release, although third-party counts differ slightly by methodology.
-
UK space strategy puts resilience first
The UK will develop a resilient national satellite communications system as a £7.8 billion space strategy brings infrastructure, defence, procurement, and economic security under one plan.
-
SAP fixes critical enterprise software flaws
SAP’s September security release includes a CVSS 10.0 memory-corruption flaw and three other critical vulnerabilities across NetWeaver, cloud application components, and SAP GUI for Java.
-
Rogue ScreenConnect clients propagate malicious scripts
Huntress has observed modified ScreenConnect clients deploying malicious scripts and propagating the same activity to newly connected systems, while ConnectWise separately prepares a file-transfer fix.