Monday, 12 October 2026 — review, tweak if you like, then post.
The Hacker News
🚨 Actively exploited: Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public… Patch fast — attackers already are. #CyberSecurity #InfoSec https://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.html
🔐 Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch A vulnerability worth acting on today 👇 Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests on their ⚡ Why it matters: Patch affected systems promptly and confirm the fix actually applied. Are your systems covered? What's your team doing about this? 💬 #CyberSecurity #InfoSec #VulnManagement #PatchNow
✅ Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
🔗 Source (The Hacker News): https://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.html
The Hacker News
🚨 Actively exploited: A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. Patch fast — attackers already are. #CyberSecurity #InfoSec https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html
🔐 Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE A vulnerability worth acting on today 👇 A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The ⚡ Why it matters: Patch affected systems promptly and confirm the fix actually applied. Are your systems covered? What's your team doing about this? 💬 #CyberSecurity #InfoSec #VulnManagement #PatchNow
✅ Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
🔗 Source (The Hacker News): https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html
BleepingComputer
🚨 Zero-day alert: GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on… Patch fast — attackers already are. #CyberSecurity #InfoSec https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/
🔐 GitLab warns of max severity code execution vulnerability A vulnerability worth acting on today 👇 GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...] ⚡ Why it matters: Patch affected systems promptly and confirm the fix actually applied. Are your systems covered? What's your team doing about this? 💬 #CyberSecurity #InfoSec #VulnManagement #PatchNow
✅ Tip: post the text above, then add the link below as the first comment (keeps reach up & avoids spam flags).
🔗 Source (BleepingComputer): https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/