News - ColibriSec (Page 2)

Citrix NetScaler Gateway SAML Memory Overflow CVE-2026-88779

News

CVE-2026-88779: Citrix NetScaler SAML Memory Overflow Zero-Day Added to CISA KEV

📌Security Roundup Series: Weekend of October 5, 2026 • 4 min read deep dive🛡️Vulnerability Intelligence: CVE ID: CVE-2026-88779 (CWE-119 / CWE-120) Severity: HIGH (CVSS 8.7) Status: Actively Exploited Zero-Day (Added to CISA KEV Oct 4, 2026; BOD 26-04 Deadline: Oct 7) Affected Systems: NetScaler ADC and NetScaler Gateway 14.1

Denmark National Central Person Register CPR Cyber Breach

News

Denmark Central Person Register Breach: 8.8 Million Citizen Records Exposed via Authorized Partner Misuse

📌Security Roundup Series: Weekend of October 5, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Kingdom of Denmark: Det Centrale Personregister (CPR) Threat Actor / Attribution: Unattributed Threat Syndicate / Compromised Private Partner Access Impact / Records Compromised: 8.8 Million Citizen Records (Current Residents, Expatriates & Historical Records) Initial Attack

Rejetto HFS CVE-2026-61500 AI Discovered Zero-Day Vulnerability

News

CVE-2026-61500: Rejetto HFS Critical RCE Discovered by AI Model Under Active Exploitation

📌Security Roundup Series: Weekend of October 5, 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-61500 (CWE-338 / CWE-287 / CWE-94) Severity: CRITICAL (CVSS 9.8) Status: Actively Exploited in the Wild (Initial attacks traced to Chinese IP infrastructure) Affected Systems: Rejetto HTTP File Server (HFS) versions 3.0.0

Monogatari Corporation Yakiniku King Data Leak Tokyo Japan

News

Monogatari Corporation Breach: 10.79 Million Customer Records Leaked in Japanese Hospitality Incident

📌Security Roundup Series: Weekend of October 5, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Monogatari Corporation (Yakiniku King, Marugen Ramen, Syabu-no-Sato) Threat Actor / Attribution: Unattributed Threat Actor / External Cloud Intrusion Impact / Records Compromised: 10,790,000 Customer Member Records Compromised Initial Attack Vector: Unauthorized Ingress into Cloud

Daiwa Securities and Scala Communications Supply Chain Cyber Incident

News

Daiwa Securities Supply Chain Breach: Vendor Server Compromise Exposes 110,000 Client Accounts

📌Security Roundup Series: Weekend of October 5, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Daiwa Securities Group Inc. / Scala Communications Inc. Threat Actor / Attribution: External Threat Actors / Third-Party Vendor Compromise Impact / Records Compromised: 110,000 Wealth Management & Brokerage Client Accounts Initial Attack Vector: Server Infiltration at

South Korean Commercial Banking Wave AI Credential Stuffing Attack

News

South Korean Banking Wave: Shinhan, KB Kookmin, Hana & Woori Hit in AI-Assisted Breach

📌Security Roundup Series: Weekend of October 5, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: South Korean Commercial Banking Sector (Shinhan, KB Kookmin, Hana, Woori) Threat Actor / Attribution: Specialized Financially Motivated Syndicate / Suspected State-Affiliated Actors Impact / Records Compromised: 70,000 High-Value Financial Accounts Compromised Initial Attack Vector: AI-Orchestrated

ShinyHunters Cybercrime Syndicate Detention Amman Jordan Law Enforcement

News

ShinyHunters Syndicate Operator Detained in Jordan: FBI Cooperation and Extortion Fallout

📌Security Roundup Series: Weekend of October 5, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: ShinyHunters Extortion Syndicate / International Law Enforcement Threat Actor / Attribution: FBI, Europol, Interpol, and Jordan General Intelligence Directorate (GID) Impact / Records Compromised: Critical Extortion Database Infrastructure & Forum Control Keys Seized Initial Attack Vector:

ColibriSec Weekly Security Roundup October 2 2026

News

Security Roundup: Fortinet FortiMail Zero-Day, Cisco SD-WAN KEV, Agentic AI DIVD Breach, KillSec Takedown (Week of October 2, 2026)

Executive Summary: The week of September 26 to October 2, 2026, marked a watershed moment in cybersecurity, defined by the real-world operationalization of autonomous agentic AI exploit chains, critical zero-days across foundational edge appliances, and historic international law enforcement takedowns. Federal authorities added active zero-days in Fortinet FortiMail (CVE-2026-104286) and

Fortinet FortiMail CVE-2026-104286 Vulnerability Architecture

News

CVE-2026-104286: Fortinet FortiMail Zero-Day Path Traversal & Null Byte Flaw

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-104286 (CWE-22 / CWE-158) Severity: CRITICAL (CVSS 9.8) Status: Actively Exploited Zero-Day (Added to CISA KEV Oct 1, 2026) Affected Systems: Fortinet FortiMail 8.0.0–8.0.1, 7.6.0–7.

Cisco Catalyst SD-WAN Manager CVE-2026-76504 Architecture

News

CVE-2026-76504: Cisco Catalyst SD-WAN Manager Critical Auth Bypass in CISA KEV

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-76504 (CWE-287 / CWE-173) Severity: CRITICAL (CVSS 9.8) Status: Actively Exploited Zero-Day (Added to CISA KEV Sep 30, 2026) Affected Systems: Cisco Catalyst SD-WAN Manager (formerly vManage) versions prior to 20.9.10.

Apple CoreGraphics CVE-2026-86950 Exploit Analysis

News

CVE-2026-86950: Apple CoreGraphics Zero-Day Exploited in Targeted Spyware Attacks

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🚨Vulnerability Intelligence: CVE ID: CVE-2026-86950 (CWE-787 (Out-of-Bounds Write)) Severity: HIGH / CRITICAL (CVSS 8.8) Status: Actively Exploited Zero-Day (CISA KEV Deadline Oct 2, 2026) Affected Systems: iOS versions prior to 26.7.1, iPadOS prior to 26.

Autonomous Agentic AI Zammad Exploit Chain Analysis

News

DIVD Breach Analysis: Autonomous Agentic AI Exploits Dual Zammad Zero-Days

📌Security Roundup Series: Week of October 2, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Dutch Institute for Vulnerability Disclosure (DIVD) Threat Actor / Attribution: Autonomous Agentic AI Adversary (Unattributed APT / Automated Botnet) Impact / Records Compromised: Compromised Internal Zammad Helpdesk & Volunteer Email Identifiers Initial Attack Vector: Multi-Stage Autonomous