WASHINGTON — The United States Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive urging organizations worldwide to immediately update their Ivanti Connect Secure (ICS) appliances. The mandate follows the active, in-the-wild exploitation of a severe zero-day authentication bypass vulnerability. The security flaw, formally cataloged as CVE-2026-104935 with a critical CVSS score of […]
Critical Severity 10.0 Vulnerability in WordPress Bricksforge Plugin Actively Exploited in the Wild
Global Cybersecurity Alert: Website administrators utilizing the WordPress ecosystem are facing an urgent security crisis. Hackers are currently and actively exploiting a maximum-severity remote code execution (RCE) vulnerability in Bricksforge, a popular and powerful third-party companion plugin for the Bricks visual builder. Tracked as CVE-2026-85097, this critical flaw has been assigned a 10.0 CVSS score—the […]
Critical Fortinet FortiMail Flaw Added to CISA KEV Catalog Amid Active In-the-Wild Exploitation
By Ravie Lakshmanan | October 02, 2026 Vulnerability / Enterprise Security Main Facts The United States Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical security vulnerability impacting Fortinet’s FortiMail secure email gateway to its heavily watched Known Exploited Vulnerabilities (KEV) catalog. The inclusion follows mounting intelligence and direct telemetry confirming that threat […]