Today's cybersecurity landscape highlights several critical vulnerabilities, including active exploitation of flaws in Microsoft Exchange and NetScaler, alongside significant data breaches impacting millions. We also see emerging trends in AI-driven attacks and evolving policy responses.
Microsoft Exchange Server Flaw Allows Mailbox AccessVulnerability
Microsoft has issued an out-of-band security update for a high-severity vulnerability (CVE-2026-96940) in Exchange Server. This flaw could enable an authenticated attacker to elevate privileges and access other users' mailboxes due to weak authorization mechanisms.
Why it matters: If your business uses Microsoft Exchange Server, immediately apply the latest security updates to prevent unauthorized access to sensitive employee communications.
Read more at The Hacker News ↗
New NetScaler Zero-Day Under Active ExploitationVulnerability
Citrix has disclosed and patched a new high-severity memory overflow vulnerability (CVE-2026-88779) in NetScaler ADC and Gateway. This zero-day flaw has been actively exploited in targeted attacks and can disrupt SAML deployments.
Why it matters: Organizations using NetScaler ADC or Gateway must apply the patches immediately, as attackers are already leveraging this vulnerability to compromise systems.
Read more at The Hacker News ↗
Rejetto HFS Vulnerability Exploited to Gain Admin AccessVulnerability
A critical vulnerability (CVE-2026-61500) in Rejetto HTTP File Server (HFS) is being actively exploited. The flaw, stemming from a weak pseudo-random number generator, allows attackers to forge administrative sessions and achieve remote code execution.
Why it matters: If your website or internal systems use Rejetto HFS, ensure it is patched without delay to prevent attackers from taking control.
Read more at The Hacker News ↗
Cling Botnet Exploiting Realtek Jungle SDK FlawsThreat
Threat actors are attempting to exploit a patched critical vulnerability in the Realtek Jungle SDK to deploy the Cling botnet. This botnet is notable for repurposing the STUN protocol for command-and-control communications.
Why it matters: Ensure all devices using the Realtek Jungle SDK are updated, as unpatched devices can be co-opted into botnets, potentially impacting your network's integrity.
Read more at The Hacker News ↗
Denmark Population Registry Data Breach Affects MillionsBreach
Denmark's Central Population Register (CPR) has reported a data breach that exposed the personal information of approximately 8.8 million registered individuals. This incident highlights the risks associated with large centralized data repositories.
Why it matters: Even small businesses can be affected by third-party breaches; review your data handling practices and understand where your customers' personal data is stored.
Read more at BleepingComputer ↗
Healthcare Firms Suffer Data Breaches Impacting 250,000Breach
Over a quarter-million patient records were stolen from Clover Health Investments and AngMar Management Services in separate data breaches in July. These incidents contribute to a significant trend of healthcare sector compromises.
Why it matters: Healthcare-related businesses must prioritize robust cybersecurity, as breaches can lead to severe regulatory penalties and loss of patient trust.
University of Illinois Chicago Medical School Hit by RansomwareRansomware
The University of Illinois Chicago (UIC) College of Medicine experienced a ransomware attack that led to the theft of data from its servers. This event underscores the persistent threat of ransomware against educational and medical institutions.
Why it matters: Ransomware targets organizations of all sizes; regularly back up your data offline and educate employees on identifying phishing attempts to prevent such attacks.
Apple Tightens macOS Full Disk Access ControlsPolicy
Apple is enhancing controls for macOS's Full Disk Access (FDA) setting due to concerns about AI agents potentially misusing it. Developers using FDA must now ensure their applications do not expose user data without explicit consent.
Why it matters: Stay informed about platform security changes, as they can affect how your applications operate and how you manage data access on devices your business uses.
Read more at The Hacker News ↗
Google Halts Open-Source Bug Bounty Due to AI SpamOther
Google has temporarily suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being overwhelmed by a flood of AI-generated and invalid vulnerability reports. This highlights a new challenge in managing bug bounty programs.
Why it matters: While not directly impacting your website, this demonstrates the increasing impact of AI on the cybersecurity ecosystem, including generating false positives or noise.
Read more at BleepingComputer ↗
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.