Latest News & Press

September 30, 2026
0-Day Exploits

0-Day Exploits

Stay informed with the latest zero-day vulnerabilities, exploit alerts, and critical security advisories.

View Articles »
Cyber Security News

Cyber Security News

Stay informed with the latest cybersecurity news, threat intelligence, data breaches, and security updates.

View Articles »
General Tech News

General Tech News

Stay informed with the latest technology news, innovations, product launches, and industry trends.

View Articles »
Resultworx Blog

Resultworx Blog

Stay informed with the latest insights, industry news, expert tips, and practical guides from the Resultworx team.

View Articles »

Latest News

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication SecretsCyber Security News
30Sep

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system command injection flaw that can lead to remote code execution when Simple Network Management Protocol

Read More »
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing AttacksCyber Security News
30Sep

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. "Once executed, the legitimate MSP360 installer, distributed under a deceptive file name established remote management access on affected

Read More »
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN ManagerCyber Security News
30Sep

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager's API as the admin user. Fixed releases are available, and there is no workaround. It carries a

Read More »
Valor, Atreides, and Sequoia back AI startup Flow Engineering at $750M valuation
TechCrunch
General Tech News
30Sep

Valor, Atreides, and Sequoia back AI startup Flow Engineering at $750M valuation

Flow Engineering, which is bringing AI agents to hardware design, also landed Roelof Botha as an angel investor and board member.

Read More »
Factory CEO just accused his VC board advisor of spying for Cognition
TechCrunch
General Tech News
30Sep

Factory CEO just accused his VC board advisor of spying for Cognition

VC Chris Degnan and former board advisor to Factory AI has taken a job as chief revenue officer for Cognition.

Read More »
The 9/11 Lesson We Still Haven’t Talked AboutGeneral Tech News
30Sep

The 9/11 Lesson We Still Haven’t Talked About

Twenty-five years after 9/11, America must secure critical space systems against adversaries exploiting cyber links, supply chains, and commercial technology.

Read More »
Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)0-Day Exploits
30Sep

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

OverviewOn September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager. The vulnerability has a CVSSv3.1 score of 9.8 and results from improper handling of URL encoding (CWE-177). An unauthenticated, remote attacker can send a crafted HTTP request that bypasses an authentication rule for a specific API endpoint, gaining access to the API with the privileges of the admin user.According to Cisco, CVE-2026-76504 is being actively exploited in the wild; Cisco PSIRT became aware of the activity in September 2026. Cisco Catalyst SD-WAN Manager systems with ports exposed to…

Read More »
Higher education is under siege, and fragmented security is making it harder to respond0-Day Exploits
30Sep

Higher education is under siege, and fragmented security is making it harder to respond

Higher education faces a difficult security equation. Universities hold large volumes of sensitive student, financial, health, and research data while supporting open networks, distributed users, legacy infrastructure, and increasingly complex cloud environments. Attackers have taken notice, and the pressure on security teams continues to grow.In Q2 2025, universities faced an average of 4,388 cyberattacks per organization per week, up 24% from the same period in 2024. Nine in ten universities reported experiencing a breach or security incident during the previous 12 months, while the average cost of a data breach in education reached $10.22 million. Confirmed attacks against higher education…

Read More »
ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability
Zero Day Initiative (ZDI)
0-Day Exploits
30Sep

ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-18145.

Read More »