CyberNest Secure — Security Bulletins https://www.cybernestsec.com/bulletins Plain-language alerts on major incidents and actively exploited vulnerabilities for Puerto Rico organizations. en-US Attackers Are Logging In as Admin on Cisco SD-WAN Manager Without a Password https://www.cybernestsec.com/bulletins/2026-10-03-cisco-sdwan-manager-cve-2026-76504 https://www.cybernestsec.com/bulletins/2026-10-03-cisco-sdwan-manager-cve-2026-76504 Sat, 03 Oct 2026 12:00:00 GMT A crafted request bypasses login on Cisco Catalyst SD-WAN Manager and grants admin API access. Cisco confirms exploitation; fixed releases are out. FortiMail Email Gateways Are Being Attacked Through a Flaw With No Patch Yet — Use the Workaround Now https://www.cybernestsec.com/bulletins/2026-10-03-fortimail-cve-2026-104286 https://www.cybernestsec.com/bulletins/2026-10-03-fortimail-cve-2026-104286 Sat, 03 Oct 2026 12:00:00 GMT An unauthenticated attacker can write files on FortiMail. Fortinet confirms exploitation, fixed releases are still upcoming, and CISA added it to KEV. A Vendor You May Never Have Heard Of Just Reported 9.5 Million Patients Breached https://www.cybernestsec.com/bulletins/2026-09-01-aesto-health-breach https://www.cybernestsec.com/bulletins/2026-09-01-aesto-health-breach Tue, 01 Sep 2026 12:00:00 GMT Aesto Health reported a breach affecting 9.5 million patients to HHS — check whether your organization uses it. Nearly 22,000 Exchange Servers Are Still Open to a Flaw That Hands Over Every Mailbox https://www.cybernestsec.com/bulletins/2026-09-01-exchange-cve-2026-62911 https://www.cybernestsec.com/bulletins/2026-09-01-exchange-cve-2026-62911 Tue, 01 Sep 2026 12:00:00 GMT CVE-2026-62911 lets an attacker take over Exchange mailboxes. Microsoft has patched it, but about 22,000 servers remain exposed. A 9.8 in JFrog Artifactory Went From Patch to Real Attacks in Four Days https://www.cybernestsec.com/bulletins/2026-09-01-jfrog-artifactory-cve-2026-82329 https://www.cybernestsec.com/bulletins/2026-09-01-jfrog-artifactory-cve-2026-82329 Tue, 01 Sep 2026 12:00:00 GMT CVE-2026-82329 (CVSS 9.8) gives an unauthenticated attacker admin access to JFrog Artifactory. Exploited four days after the patch. The AI Tool Someone Installed Is Holding Your Cloud Keys — and It Is Under Attack https://www.cybernestsec.com/bulletins/2026-09-01-langflow-cve-2026-0768 https://www.cybernestsec.com/bulletins/2026-09-01-langflow-cve-2026-0768 Tue, 01 Sep 2026 12:00:00 GMT CVE-2026-0768 (CVSS 9.8) allows remote code execution in Langflow, an AI app builder, and is being used to steal cloud and API keys. PaperCut Is Now on CISA's Known Exploited List — the Federal Deadline Is September 14 https://www.cybernestsec.com/bulletins/2026-08-31-papercut-cisa-kev https://www.cybernestsec.com/bulletins/2026-08-31-papercut-cisa-kev Mon, 31 Aug 2026 12:00:00 GMT CISA added two PaperCut print-management flaws to its Known Exploited Vulnerabilities catalog on August 31, 2026.