SecurityWeek reports that ConnectWise has issued patches for a ScreenConnect vulnerability actively exploited in worm-like intrusions. The flaw can let attackers send and execute files without authorization via an active remote session, raising the odds of rapid lateral spread. Teams running exposed ScreenConnect deployments should prioritize patching and hunt for signs of remote session misuse immediately.
Source: SecurityWeek
GitLab CVE-2026-85706 (CVSS 10.0) — One Request, No Auth, Full File Read
Multiple outlets highlight CVE-2026-85706 as a critical GitLab path traversal issue with unauthenticated access that can enable attackers to retrieve arbitrary files they should not see. The reported timeline is especially concerning: exploitation began within 24 hours of disclosure. If you run GitLab CE/EE, confirm you’re on fixed versions and review exposure of the repository commits API.
Source: Security Affairs
Three JFrog Artifactory Flaws Used for Backdoor Deployment
SecurityWeek says three JFrog Artifactory vulnerabilities have been exploited to deploy backdoors, with attackers able to bypass authentication and elevate privileges to administrator. This is a supply-chain-adjacent risk: compromises of artifact repositories can translate into widespread downstream impact for builds and deployments. Validate patch status, rotate any affected credentials, and consider integrity checks for images/packages produced during the exposure window.
Source: SecurityWeek
Telus Warns of Account Breaches After Credential Theft in Multi-Month Campaign
SecurityWeek reports Telus notified customers of account breaches tied to stolen credentials used over a multi-month campaign. The activity reportedly targeted subscriber personal data and billing records, underscoring the continued dominance of identity compromise over “exotic” technical attacks. Organizations should review authentication logs for anomalous access patterns and enforce stronger session controls where possible.
Source: SecurityWeek
WhatsApp Restricted Chat Limits Sync to Your Primary Phone (Android Beta)
Help Net Security reports that WhatsApp is testing a per-chat “Restricted Chat” setting in its Android beta. When enabled, it prevents the selected conversation from syncing to linked devices, meaning WhatsApp Web and secondary phones can’t access it. While not a substitute for full end-to-end security controls, the feature is a notable usability shift toward tighter per-conversation privacy boundaries.
Source: Help Net Security
Debian 13.7 (“trixie”) Ships Fixes Behind 92 Security Advisories
Help Net Security reports that Debian 13.7 bundles fixes across 92 security advisories affecting 106 packages, including multiple Linux kernel-related issues. The update also rebuilds installer media, which matters for environments installing from older media. If you manage Debian fleets, treat this as a scheduled upgrade target and confirm kernel and userland packages are current across both x86_64 and ARM64 where relevant.
Source: Help Net Security
NSA Reorganization Creates Five “Mission Centers,” Including Cyber and AI
RecordedFuture reports that the NSA is undergoing a rapid reorganization into five mission centers, explicitly including cyber and AI. For defenders, this signals likely changes in focus areas, resourcing, and the type of intelligence products that could influence threat reporting and policy priorities. Watch for downstream effects on guidance, vulnerability coordination, and public-private engagement over the coming months.
Source: RecordedFuture
You May Also Be Interested In... UK.gov Begins Killing Off Passwords for 23 Million Users
Windows 11 Patch Tuesday Breaks Audio and Microphones on PCs
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users