Good morning. Fortinet shipped fixes for 18 critical bugs on Tuesday. None are exploited yet. Zoom and Apple also have updates worth pushing, and Monday is the day Windows stops trusting eMudhra certificates.
Coffee first. Then a firewall upgrade, a Zoom version check, a phone update and a certificate search.
Lead Story
Fortinet: 18 critical fixes across FortiOS, FortiMail and FortiClient. Clustered FortiGates go first: one bug runs commands as super admin through HA packets. Upgrade to 7.6.8 or 7.4.13.
Don’t Miss the Policy Changes That Affect Security Decisions
Get the key CISA actions, new regulations, guidance, and risk shifts in a quick daily brief.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Also Worth Your Attention
Zoom Workplace for Windows: a 9.6 bug an outsider can trigger. Get every PC to 7.1.8 and turn on auto-update.
Apple: Bluetooth pairing without a tap, and strangers in iMessage groups. Require iOS 27.2.1 or 26.7.3 and the matching macOS in MDM.
eMudhra: Windows drops the last roots on Monday. Find any emSign certificate on your sites or vendors’ portals and replace it before November 16.
On the radar
- Ivanti fixed a 9.8 unauthenticated SQL injection in Endpoint Manager (2024 SU8) and a 9.4 bug in Cloud Services Application (5.0.8.1). No attacks reported. SecurityWeek.
- Notion says a breach at its AI provider Fireworks AI exposed Notion AI chat transcripts from fewer than 1% of users. Affected workspace owners can review the data in Notion. BleepingComputer.
Slack paste
Today’s brief: (1) Fortinet: FortiOS 7.6.8/7.4.13 (HA bug CVE-2026-126259 first), FortiMail 7.6.7, FortiClient 7.4.8. (2) Zoom Workplace for Windows: 7.1.8 (CVE-2026-108186). (3) Apple: iOS 27.2.1/26.7.3, macOS 27.2.1/26.7.3/15.8.3. (4) eMudhra: replace emSign certificates before Windows drops the roots on Monday, Nov 16.
Go Deeper
Identity and access: IAM library. Tools and checkers: cybersecurity tools. Building a hardening routine for firewalls and endpoints? Our GSEC exam guide covers the defensive basics.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.
