| OpenText Cybersecurity Community

Skip to main content

Customer Support Customer Support

Events
Leaderboard
OpenText Support
Webroot Support

Create topic
Login

Threat Intel Hub

Security Industry News

Trending news on the latest threats

Events and Conferences

Insights and takeaways from cybersecurity conferences

Threat Reports

All of our yearly Threat Reports and Nastiest Malware Reports

Security Expert Perspectives

Experts share their insights cyber threats and staying ahead of evolving risks

Phish Tank

Stay up-to-date on the latest phishing threats and prepare for them

Ransomware Spotlight

Dedicated to all things related to ransomware

Exploit & Vulnerability Vault

Vulnerabilities in software, systems, devices, and mitigation strategies

AI Threats & Security

Coverage of AI-driven cyber threats and defensive strategies

Latest Intel

Cyber News Rundown: Silent Ransom Group Extorts $207M Without Ransomware

23 hours ago

183

When Trust Comes in Uniform: A Device-Code Phishing Attack

21 hours ago

182

Cyber News Rundown: Warlock ransomware targets SharePoint vulnerabilities

4 days ago

192

From Closing Documents to Credential Theft: Inside a Mortgage-Themed Phishing Attack

25 days ago

893

Recently active

TripleHelixModerator

posted in Security Industry News

Release notes for Microsoft Edge Stable Channel October 16, 2026

October 16, 2026Microsoft released the latest Microsoft Edge for Stable (Version 155.0.4283.62) which incorporates the latest Security Updates of the Chromium project. For more information, see the Security Update Guide.Note: CVE's will be added as s

30

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support Release Date October 16, 2026

CISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using ol

40

ConnorMThreat Research Analyst

published in Security Industry News

Cyber News Rundown: Silent Ransom Group Extorts $207M Without Ransomware

Cyber News Rundown: Silent Ransom Group Extorts $207M Without Ransomware

Following a recent data leak, it has been revealed through thousands of messages and documents that the threat actors behind Silent Ransom Group have successfully extorted at least 27 law firms for an estimated $207 million without deploying any malw

183

Jasper_The_RasperModerator

posted in Vulnerability Vault

Critical BlockStrap flaw lets hackers run code on Magento servers

October 16, 2026 By Bill Toulas Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.Accordi

50

TripleHelixModerator

posted in Vulnerability Vault

EXTERNAL, PUBLICATION Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation Publish Date October 16, 2026

The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) published Key Practices for Incident Readiness and Respons

40

TripleHelixModerator

posted in Vulnerability Vault

Alert CISA Adds Two Known Exploited Vulnerabilities to Catalog Release Date October 16, 2026

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CVE-2026-102764 BeyondTrust Remote Support Au

140

TroyGIllCommunity Manager

published in Phish Tank

When Trust Comes in Uniform: A Device-Code Phishing Attack

When Trust Comes in Uniform: A Device-Code Phishing Attack

Most phishing campaigns aim to steal usernames and passwords. This campaign took a different approach. Rather than presenting a fake login page, the attackers abused Microsoft's legitimate device-code authentication process and carefully guided victi

182

Jasper_The_RasperModerator

posted in Vulnerability Vault

F5, Juniper Networks Patch Critical Vulnerabilities

Successful exploitation of some of these issues could lead to remote code execution and full device takeover. October 16, 2026 By Ionut ArghireF5 and Juniper Networks have rolled out patches for dozens of vulnerabilities across their products, includ

70

Jasper_The_RasperModerator

posted in Vulnerability Vault

PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager

October 16, 2026 By Pierluigi Paganini PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access.PEERSTITCH, a stealthy implant deployed during a prolonged intrusion, helpe

40

Jasper_The_RasperModerator

posted in Vulnerability Vault

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. October 16, 2026 By Ionut ArghireA Chinese APT has been exploiting a BeyondTrust vulnerability as a zero-day since August as part of it

60

Show more activity

Events calendar

Leaderboard

Join the Conversation

Tweets by OpenTextSec

Powered by Gainsight

Terms & Conditions Accessibility statement

Cybersecurity Solutions OpenText Cybersecurity 2024 Threat Report Cyber Resilience Program

Privacy Policy Cookie Policy Cookies Preferences

LinkedIn Twitter YouTube

© 2025 Open Text Corporation. All rights reserved.

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview