Friday, 02 October 2026 — review, tweak if you like, then post.
BleepingComputer
🛠️ Heads up, admins: Fortinet warns of critical FortiMail flaw exploited in zero-day attacks Patch fast — attackers already are. #CyberSecurity #InfoSec https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/
🔐 Fortinet warns of critical FortiMail flaw exploited in zero-day attacks A vulnerability worth acting on today 👇 Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...] ⚡ Why it matters: Patch affected systems promptly and confirm the fix actually applied. Are your systems covered? What's your team doing about this? 💬 #CyberSecurity #InfoSec #VulnManagement #PatchNow
✅ Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
🔗 Source (BleepingComputer): https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/
The Hacker News
🚨 Zero-day alert: Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes Patch fast — attackers already are. #CyberSecurity #InfoSec https://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.html
🔐 Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes A vulnerability worth acting on today 👇 The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write arbitrary files on the underlying system. "An improper ⚡ Why it matters: Patch affected systems promptly and confirm the fix actually applied. Are your systems covered? What's your team doing about this? 💬 #CyberSecurity #InfoSec #VulnManagement #PatchNow
✅ Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
🔗 Source (The Hacker News): https://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.html
BleepingComputer
⚠️ Patch now: DIVD says Zammad zero-days enabled AI-driven network breach Patch fast — attackers already are. #CyberSecurity #InfoSec https://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/
🔐 DIVD says Zammad zero-days enabled AI-driven network breach A vulnerability worth acting on today 👇 The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...] ⚡ Why it matters: Patch affected systems promptly and confirm the fix actually applied. Are your systems covered? What's your team doing about this? 💬 #CyberSecurity #InfoSec #VulnManagement #PatchNow #DataBreach
✅ Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
🔗 Source (BleepingComputer): https://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/