Security news.
State-sponsored actors and cybercriminals are actively capitalizing on critical zero-days and appliance vulnerabilities, led by targeted exploitation of BeyondTrust remote management servers and Nextcloud integrations. Meanwhile, major infrastructure disruptions have halted US federal court operations, and critical flaws across the Linux kernel and network infrastructure demand immediate remediation.
Chinese APT Exploits BeyondTrust Zero-Day in Espionage Attacks
China-linked threat group Armory Castle has been actively exploiting CVE-2026-102764 (CVSS 9.3), an improper origin validation flaw in BeyondTrust Remote Support, to compromise servers and deploy custom tooling since August.
Critical PwnEscape Linux Flaw Enables VM Escape and Host Memory Leaks
Tracked as CVE-2026-99999, a high-impact vulnerability in the Linux kernel's networking code allows code running within guest virtual machines to read host memory across shared environments.
Hackers Exploit Collabora RCE to Backdoor Nextcloud Instances
Adversaries are actively weaponizing CVE-2026-110447, a critical command execution vulnerability in Nextcloud’s Collabora Online Built-in CODE Server component, to establish persistent server access.
BAE Systems Cyberattack Paralyzes US Federal Bankruptcy Court Notices
A breach affecting government contractor BAE Systems has taken down the nationwide Bankruptcy Noticing Center, disabling vital automated legal noticing for the federal court system.
CISA Adds Actively Exploited Atlassian Vulnerability to KEV Catalog
CISA has ordered federal agencies to patch CVE-2026-21589, a flaw exposing restricted files across multiple Atlassian products to external threat actors, citing evidence of active exploitation.
F5 and Juniper Networks Address Critical Device Takeover Vulnerabilities
Network equipment vendors F5 and Juniper Networks have rolled out patches for high-severity flaws that could allow unauthenticated attackers to execute remote code and seize full control of devices.
Burger King Japan Data Breach Exposes 11 Million Customer Records
The fast-food chain's Japanese subsidiary disclosed unauthorized access to a backend server, leaking personal data belonging to 11.18 million customers.