The brief

Tuesday, October 6, 2026

Atlassian disclosed a critical unauthenticated file-access flaw in Jira, Confluence, Bitbucket, and other datacenter products; Citrix NetScaler CVE-2026-88779 is being exploited in the wild and can knock SAML appliances offline. FBI arrests tied to ShinyHunters may slow extortion, but PeopleSoft and KVM escape claims show enterprise risk is spreading.

12 stories · 3 podcasts · get this by email each weekday

Today's stories

Hackers steal 8 million citizens’ records from Danish government database
NB594: Visa Offers AI Security Software Free of Charge; Meta’s 1Pb Subsea Cable Puts Petal to the Metal
FBI confirms 'multiple' arrests related to ShinyHunters hack
ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Citrix NetScaler security snafus get even worse amid more 0-day reports
ShinyHunters’ exploitation of a new PeopleSoft zero-day hole threatens to change enterprise risk dynamics
Security researcher claims they found KVM guest-host escape flaw
CVE-2026-105484: A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the functio... (CVSS 10)
CVE-2026-105763: Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQ... (CVSS 9.6)
CVE-2026-105638: Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric... (CVSS 9.1)
Atlassian warns of critical file access flaw in its datacenter products

Worth a listen

← All editions