DefendEdge Cyber Security Blog
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary commands, to conduct credential theft and data exfiltration.…
Cyberattacks Went Physical: 50°C Freezers and a Ransomware Surge
French supermarkets lost food stock after attackers pushed freezers toward 50°C. Inside a 902-incident week: surging ransomware crews and the OT lesson.
FortiBleed: From Credential Exposure to a Secure FortiGate State
FortiGate firewalls provide crucial security at the edge of an organization’s network. These firewalls protect internet-facing services, terminate VPN connections, enforce security policies, and provide the path into the internal network in many environments. When you are warned about potentially compromised FortiGate credentials across over 80,000+ verified devices across almost 200 countries, you should heed…
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are combining automated scanning tools, large-scale botnets, and hands-on exploitation techniques to target and steal sensitive data…
Vishing and MFA Phishing Attacks
1. Executive Summary Threat actors are targeting banking clients through coordinated social engineering campaigns that leverage sophisticated voice phishing (vishing), bank impersonation, caller ID spoofing, credential-harvesting websites, and MFA social engineering. These attacks are conducted in real time, allowing threat actors to capture victims’ banking credentials and authentication codes and immediately use them to access…
Healthcare Under Attack: 83 Incidents in One Week and the Senate’s Answer
Hospitals and clinics absorbed 83 attacks in one week, tied with government as the most-targeted sector. Here is what the data says, and how to respond.
Vulnerability Summary for the Week of September 21, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 101gen–Automation Web Platform Notifications and OTP for WooCommerce, Advanced Country Code The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to…
Ransomware Is Running Hot: What 457 Attacks in One Week Reveal
Ransomware drove 457 of 1,068 tracked attacks this week — 43% of all incident volume. Who’s being hit, which crews are surging, and how to prepare.
Vulnerability Summary for the Week of September 14, 2026
High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 03-lovepreetSingh–MCP A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function create_file of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The exploit is publicly available and might…
The Developer Is the Perimeter: Inside This Week’s Supply Chain Espionage Campaigns
1,090 attacks tracked this week — but the sharpest threat wasn’t ransomware. It was fake job tests and poisoned supply chains aimed at developers.