Good morning. CISA confirmed attacks on the Atlassian file-read bug we have covered since October 7, and gave self-hosted Jira and Confluence a Sunday deadline. Juniper shipped a large set of Junos fixes, Adobe Commerce has a no-login bug rated 10.0, and a Linux kernel flaw lets a VM read its host’s memory. Here is the order we would take them.
Lead Story
CISA confirms attacks on the Atlassian file-read bug in self-hosted Jira and Confluence. Federal deadline is Sunday, October 18. Get the fixed builds →
Also Worth Your Attention
Juniper fixed dozens of critical Junos router and firewall bugs, two of them through J-Web with no login. Close J-Web first →
Don’t Miss the Policy Changes That Affect Security Decisions
Get the key CISA actions, new regulations, guidance, and risk shifts in a quick daily brief.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Adobe Commerce and Magento stores have a no-login bug rated 10.0 to patch. Store patch list →
A Linux kernel bug lets a guest VM read host memory, and a lab chain reached a full host escape. Host kernel versions →
Also on the radar: EG Secure Solutions warns that a command injection bug in SiteGuard Server Edition, a web application firewall used mostly in Japan, is being exploited, and Meta is notifying about 1,500 people after attackers used a stolen employee login to get into some of its GitHub repositories (The Hacker News).
Source: CISA KEV alert, October 15; Atlassian; Juniper JSA112187; Adobe APSB26-153; pwn.ai
Go Deeper
- Identity and access management: Crowd, admin accounts and who can log in
- Cybersecurity tools for log review and patch tracking
Get this in your inbox every weekday morning: subscribe to the Daily Brief.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.
