Security news.
Threat actors are actively leveraging supply-chain compromises and zero-day vulnerabilities to breach enterprise networks, steal developer secrets, and deploy persistent backdoors. Critical updates have landed for the Go runtime to revoke compromised CA keys, while emergency patches address actively exploited flaws in edge appliances and core software. IT and security teams should prioritize verifying software integrity, credential revoking, and applying pending critical infrastructure updates.
OVHcloud CLI Releases Backdoored on GitHub
Attackers hijacked a contributor's account to tamper with five release archives of the OVHcloud CLI, packaging secret-stealing malware to compromise developer machines.
Go Issues Emergency Update Blocking Eight CA Keys
Go versions 1.27.3 and 1.26.10 alter the runtime certificate verifier to reject chains passing through eight intermediate certificate authority keys due to undisclosed security risks.
ConnectWise Suspends Cloud Backup Following Identity Abuse
ConnectWise forced account and application credential resets after attackers abused the vendor's Entra application identities to request Microsoft Graph tokens across client tenants.
CISA Urges Patching Actively Exploited BeyondTrust Zero-Day
Threat actors are actively exploiting CVE-2026-102764, an authentication bypass vulnerability affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier, prompting immediate KEV catalog addition.
Ransomware Gangs Exploit Critical PAN-OS Vulnerability
Ransomware operations including Qilin and Inc have been observed actively targeting CVE-2026-0257 across Palo Alto Networks PAN-OS edge appliances for initial access.
Siemens Software Center Flaw Exploited in ClickFix Attacks
Siemens patched a high-severity DLL sideloading flaw (CVE-2026-110936, CVSS 8.4) that threat actors are exploiting alongside social engineering lures to execute malicious code and deliver remote access trojans.
Rank Math PRO WordPress Plugin Hit by Supply-Chain Attack
Malicious code planting stealthy backdoors was discovered inside official packages of Rank Math PRO version 3.0.123 distributed directly from the vendor's site.
Attackers Weaponize Plex2Shell Vulnerability Chain Against Plex Servers
Threat actors have begun mass exploitation of four chained vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse shell proxies within 24 hours of public exploit disclosure.