James Luther - ColibriSec (Page 3)

Fortinet FortiMail CVE-2026-104286 Vulnerability Architecture

News

CVE-2026-104286: Fortinet FortiMail Zero-Day Path Traversal & Null Byte Flaw

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-104286 (CWE-22 / CWE-158) Severity: CRITICAL (CVSS 9.8) Status: Actively Exploited Zero-Day (Added to CISA KEV Oct 1, 2026) Affected Systems: Fortinet FortiMail 8.0.0–8.0.1, 7.6.0–7.

Intrusión Autónoma con IA en Plataforma Zammad de DIVD

Noticias

Análisis de la Intrusión en DIVD: IA Agéntica Autónoma Explota Doble Zero-Day en Zammad

📌Security Roundup Series: Semana del 2 de Octubre de 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Instituto Neerlandés de Divulgación de Vulnerabilidades (DIVD) Threat Actor / Attribution: Adversario Autónomo con IA Agéntica (Grupo no atribuido / Botnet avanzada) Impact / Records Compromised: Afectación al sistema interno de tickets Zammad y

Cisco Catalyst SD-WAN Manager CVE-2026-76504 Architecture

News

CVE-2026-76504: Cisco Catalyst SD-WAN Manager Critical Auth Bypass in CISA KEV

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-76504 (CWE-287 / CWE-173) Severity: CRITICAL (CVSS 9.8) Status: Actively Exploited Zero-Day (Added to CISA KEV Sep 30, 2026) Affected Systems: Cisco Catalyst SD-WAN Manager (formerly vManage) versions prior to 20.9.10.

Apple CoreGraphics CVE-2026-86950 Exploit Analysis

News

CVE-2026-86950: Apple CoreGraphics Zero-Day Exploited in Targeted Spyware Attacks

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-86950 (CWE-787 (Out-of-Bounds Write)) Severity: HIGH / CRITICAL (CVSS 8.8) Status: Actively Exploited Zero-Day (CISA KEV Deadline Oct 2, 2026) Affected Systems: iOS versions prior to 26.7.1, iPadOS prior to 26.

Autonomous Agentic AI Zammad Exploit Chain Analysis

News

DIVD Breach Analysis: Autonomous Agentic AI Exploits Dual Zammad Zero-Days

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Dutch Institute for Vulnerability Disclosure (DIVD) Threat Actor / Attribution: Autonomous Agentic AI Adversary (Unattributed APT / Automated Botnet) Impact / Records Compromised: Compromised Internal Zammad Helpdesk & Volunteer Email Identifiers Initial Attack Vector: Multi-Stage Autonomous

Operation KillSwitch KillSec Ransomware Takedown

News

Operation KillSwitch: Global Takedown of KillSec Ransomware and 110TB Data Seizure

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: KillSec Ransomware-as-a-Service (RaaS) Syndicate Threat Actor / Attribution: Joint International Operation: German LKA, Europol, Eurojust, FBI, UK NCA Impact / Records Compromised: 110 Terabytes of Stolen Enterprise Data Recovered; 5 Infrastructure Nodes Seized Initial Attack

Brecha de Ciberseguridad en Plataforma Bitget

Noticias

Brecha de $387.5M en Bitget: Zero-Day en Software de Terceros y Riesgo en Billeteras Calientes

📌Security Roundup Series: Semana del 2 de Octubre de 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Exchange Global de Criptomonedas Bitget Threat Actor / Attribution: Actor de Amenazas Avanzado (Indicios apuntan a Lazarus Group / Corea del Norte) Impact / Records Compromised: $387.5 millones en activos digitales (ETH, XRP,

Brecha de Seguridad en Software Médico Dental FELG Dent

Noticias

Filtración Sanitaria en FELG Dent: Falla de IDOR en API Expone 2.4 Millones de Pacientes

📌Security Roundup Series: Semana del 2 de Octubre de 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: FELG Software sp. z o.o. (Plataforma FELG Dent) Threat Actor / Attribution: Actor de Amenazas "Horus" (Extorsión y Robo de Información) Impact / Records Compromised: 2.4 millones de pacientes,

Desarticulación Internacional del Ransomware KillSec

Noticias

Operación KillSwitch: Desarticulación Global del Ransomware KillSec y Decomiso de 110TB

📌Security Roundup Series: Semana del 2 de Octubre de 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Organización de Ransomware KillSec (RaaS) Threat Actor / Attribution: Operación Policial Conjunta: LKA de Hamburgo, Europol, Eurojust, FBI, Policía Nacional de España Impact / Records Compromised: 110 Terabytes de datos recuperados; 5 servidores

Análisis del Exploit en Apple CoreGraphics CVE-2026-86950

Noticias

CVE-2026-86950: Zero-Day en Apple CoreGraphics Explotado en Ataques de Espionaje

📌Security Roundup Series: Semana del 2 de Octubre de 2026 • 4 min read deep dive🛡️Vulnerability Intelligence: CVE ID: CVE-2026-86950 (CWE-787 (Escritura Fuera de Límites)) Severity: ALTA / CRÍTICA (CVSS 8.8) Status: Zero-Day Explotado en la Naturaleza (Plazo CISA KEV: 2 de Octubre de 2026) Affected Systems: iOS previo a

Arquitectura de Vulnerabilidad Cisco SD-WAN CVE-2026-76504

Noticias

CVE-2026-76504: Evasión Crítica de Autenticación en Cisco Catalyst SD-WAN Manager en CISA KEV

📌Security Roundup Series: Semana del 2 de Octubre de 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-76504 (CWE-287 / CWE-173) Severity: CRÍTICA (CVSS 9.8) Status: Zero-Day Bajo Ataque Activo (Añadido a CISA KEV el 30 de Septiembre de 2026) Affected Systems: Cisco Catalyst SD-WAN Manager (antes vManage)

FELG Dent IDOR API Healthcare Breach Architecture

News

FELG Dent Healthcare Breach: IDOR API Flaw Exposes 2.4 Million Patient Records

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🏛️Incident Overview:Target / Organization: FELG Software sp. z o.o. (FELG Dent Platform)Threat Actor / Attribution: Threat Actor "Horus" (Extortion & Data Theft)Impact / Records Compromised: 2.4 Million Patients, 1.2M Prescriptions, PESEL IDs,