Security news.
Today's security landscape is dominated by active exploitation of edge network devices and severe authentication vulnerabilities, prompting emergency catalog additions by CISA. Meanwhile, critical breaches have exposed sensitive access across major financial and blockchain infrastructure, compounded by emerging supply-chain and developer-tooling exposures. IT and security teams are advised to review internet-exposed gateways and developer environments immediately.
SonicWall Fixes Actively Exploited SonicOS SSL-VPN Flaw
CISA added CVE-2026-19868 to its Known Exploited Vulnerabilities catalog after attackers began exploiting an authentication bypass in SonicOS firewalls to defeat SAML checks and MFA. SonicWall has issued patches alongside fixes for six other vulnerabilities.
French Bank Hit for $133M via Compromised Third Party
French cooperative bank Crédit Mutuel Arkéa suspended multiple systems following a cyberattack on a service provider that enabled up to $133 million in unauthorized transactions.
Chainalysis Breach Compromises Credentials and Active Tokens for All Users
Blockchain analytics firm Chainalysis shut down its Reactor and Data Solutions services after an agentic cyberattack exposed names, password hashes, and active authentication tokens across its entire customer base.
OpenSSH SSHole Flaw Under Rapid Exploitation
Threat actors are actively exploiting CVE-2026-123158 (CVSS 8.1), an authentication bypass dubbed "SSHole" that allows root access via arbitrary passwords on Linux systems running OpenSSH with musl libc and disabled PAM.
Claude Code Feature Leaks Hardcoded Secrets to Public Repositories
A setting in Anthropic's Claude Code coding assistant that saves user-approved commands verbatim in project configuration files has exposed passwords and API keys across 1,122 public GitHub repositories.
Pre-Auth Root RCE Exploit Chain Published for Barracuda ESG
Researchers released a technical walkthrough showing how to chain CVE-2026-116606 and CVE-2026-111560 to achieve unauthenticated remote root code execution against Barracuda Email Security Gateway appliances.
QNAP Warns of Active Plex2Shell Attacks Against NAS Devices
Hackers are actively targeting QNAP network-attached storage appliances by exploiting the Plex2Shell vulnerability chain, prompting vendor warnings to update Plex Media Server immediately.
CISA and Federal Agencies Warn of Cyberattacks on Cold Chains
US and international agencies issued joint hardening guidance following widespread cyber incidents that manipulated temperature controllers across European supermarkets and industrial refrigeration infrastructure.