Briefing · Thu, Oct 8 · 12 sources read

Cybersecurity Professionals

2 stories1 new since yesterday0 articles left outPast briefings →

Sources · Thu, Oct 8 · Cybersecurity Professionalsbuilt 12:31 UTC

12sources read
for this niche Thu, Oct 8

In the briefing2

New today1

Copies folded0

Left out0

How a briefing is checked →

Follow by emailFree: the weekly email, no account. Pro: daily, or the weekdays you pick.

Day 3

FortiMail zero-day exploitation triggers urgent CISA response

Why it matters: Unauthenticated file writes on an internet-facing mail appliance rated CVSS 9.8 are being exploited now, and with patches pending, teams have to apply the workaround and check appliances for compromise rather than wait.

Fortinet · yesterday

5 sources

Cybersecuritynews · 2d Socprime · 3d Pasqualepillitteri · 6d Cyberinsider · 6d Shattered · 6d

New

CISA flags new critical enterprise flaws under active attack

Why it matters: The WSO2 flaw has been exploited since September 13 and was added to KEV on Sept 24, so any exposed instance may already have been hit, and the Citrix NetScaler flaw adds another edge system under attack to triage.

Wso2 · last 3 days

2 sources

Shattered · 4d Gbhackers · 4d

What moved

New today: a cluster of CISA-listed enterprise flaws, including a CVSS 10.0 WSO2 API Manager bug exploited since September 13 and a Citrix NetScaler flaw CISA says is used in ongoing attacks. The FortiMail zero-day is still being exploited with patches pending, so the workaround is the only control available.

Where the discourse splits

No real disagreement in today's sources.

Worth watching

Whether Fortinet ships patches for CVE-2026-104286 in FortiMail, which are still pending
Whether CISA sets or updates remediation guidance for the Citrix NetScaler flaw CVE-2026-88779
Any further evidence of exploitation of WSO2 API Manager CVE-2026-5430 beyond the activity seen since September 13

Follow Cybersecurity Professionals

This briefing in your inbox every Monday. We skip emails when there are no new stories to report.

Free · weekly · unsubscribe in one click · no account needed. Pro: daily, or the weekdays you pick.

Free and Pro

Free: this briefing by email once a week, Mondays.

Pro: the daily email, or the weekdays you pick, plus custom niches, angles on every story and the archive. Compare.