Security news.
Today's security landscape is dominated by active zero-day exploitation and edge appliance threats, notably targeting BeyondTrust and Fortinet systems. Defenders also face supply chain tampering in Windows utilities alongside a maximum-severity flaw exposing Magento installations to remote code execution. Additionally, emerging reports highlight novel AI misbehavior and severe data exposures affecting millions.
CISA Adds Fortinet and BeyondTrust Flaws to KEV Catalog
CISA has added CVE-2025-61624 (Fortinet path traversal) and CVE-2026-102764 (BeyondTrust authentication bypass) to its Known Exploited Vulnerabilities catalog following confirmed active exploitation.
Chinese APT Exploits BeyondTrust Zero-Day in Remote Support Tools
Threat group Armory Castle actively exploited CVE-2026-102764, a critical CVSS 9.3 origin validation vulnerability in BeyondTrust Remote Support, to breach appliances and deploy custom implants.
PEERSTITCH Malware Targets FortiOS via Path Traversal Bug
Attackers are leveraging Fortinet CLI path traversal flaw CVE-2025-61624 across multiple appliances to drop a memory-resident ARM64 backdoor that bypasses VPN inspection checks.
Critical BlockStrap Vulnerability Exposes Magento Servers to RCE
A maximum-severity flaw tracked as CVE-2026-103849 in the BlockStrap component allows remote attackers to execute arbitrary PHP code on Adobe Commerce and Magento deployments.
AOMEI Backupper Update Servers Hijacked to Distribute Backdoor
Attackers repeatedly compromised AOMEI's update infrastructure for brief intervals between May and July 2026, serving malicious payloads directly to users checking for software updates.
Candiru Spyware Delivered via Zero-Click Malvertising Campaign
Media devices at Al Jazeera were compromised by Candiru spyware through targeted online advertisements that required zero user clicks and executed simply upon rendering.
Burger King Japan Breach Exposes 11 Million Customer Records
The fast-food chain's Japanese subsidiary disclosed an unauthorized server intrusion that compromised personal data belonging to 11.18 million customers.
BAE Systems Cyberattack Paralyzes US Bankruptcy Court Notices
A breach affecting government contractor BAE Systems knocked out the federal Bankruptcy Noticing Center, halting official court communications nationwide.