CISA has confirmed active exploitation of CVE-2025-61624 in FortiGate/FortiOS. An attacker must already have privileged admin access, but can then gain root control. IT providers should verify versions and investigate for compromise now.

BeyondTrust Remote Support, formerly known as Bomgar, is used by IT teams and service providers to maintain systems remotely. A critical zero-day vulnerability has already been exploited against self-hosted appliances. BeyondTrust patched its SaaS instances by 9 October 2026, but self-hosted systems require an explicit check. If your company or IT provider operates BeyondTrust Remote Support on its own appliance, ask them now to confirm that BT26-05-RS is installed and whethe

Palo Alto Networks confirms limited active exploitation of CVE-2026-0322. IT providers should update affected firewalls and Panorama systems today and review management access.