The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) published Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. The product outlines ten voluntary core practices to help organizations that …
CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login credentials and other sensitive information or install malware on targeted …
CISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade first. Cyber threat actors are actively exploiting the vulnerability to gain initial access, then establishing …
Summary
Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients.
The following versions of Eclipse Foundation Eclipse Milo are affected:
- Eclipse Milo …
Summary
Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.
The following versions of J4Care dcm4che are affected:
- dcm4chee-arc-light 5.35.1 (CVE-2026-97851, CVE-2026-107621, …
Summary
Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server.
The following versions of Thermo Fisher Torrent Suite Software are affected:
- Torrent Suite Software <=5.18 (CVE-2026-107777)
| CVSS | Vendor | …
|---|
Summary
Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras.
The following versions of Guangzhou Juan IoT Technology EseeCloud are affected:
- EseeCloud App <=4.9.6 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664)
- EseeCloud Firmware <=4.9.86.0 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664)