Cyber Policy Review
Recent incidents, interpreted for the people who must decide whether to act.
BeyondTrust and Mandiant disclosed that CVE-2026-102764 was exploited as a zero-day on 29 August 2026 against one hosted Remote Support instance and one self-hosted appliance. Disclosure occurred on 15 October; CISA issued an alert on 16 October.
Read analysisPalo Alto Networks has observed very limited exploitation of CVE-2026-0322, an authenticated remote-code-execution flaw in the PAN-OS management interface. The activity’s start date is unknown; disclosure was 14 October and the advisory was updated on 15 October 2026.
Read analysisCisco has confirmed active exploitation of CVE-2026-76519, an unauthenticated path-traversal flaw in Secure Email Gateway that can lead to root command execution. The exploitation date is not public; Cisco disclosed the issue on 14 October 2026.
Read analysisCERT-FR has expanded the French supermarket refrigeration incident from several reported stores to numerous confirmed compromises across Danfoss, Copeland and Dixell controller families, warning that attack campaigns are probably still active.
Read analysisConfirmed exploitation of an Ivanti Connect Secure zero-day enabled credential theft, data exfiltration and access to enterprise recovery secrets; patching is urgent but does not establish that a device is clean.
Read analysisCISA expanded its NetScaler alert on 9 October, while the confirmed campaign still traces to exploitation observed from early September. CISOs should treat patch status and compromise status as separate decisions.
Read analysisA 58-page joint advisory consolidates evidence from multiple investigations into long-running campaigns that combined automated scanning, compromised infrastructure and hands-on exploitation to steal sensitive data worldwide.
Read analysisAn October notice brings a February incident back into focus. Treat disclosure timing and attack timing separately.
Read analysisAffected products, configurations, sectors and dependencies—not just a headline severity score.
Event date, publication date, primary sources and confidence in the available evidence.
Prioritized checks and mitigations, accountable owners and conditions for escalation.