A cyberattack disrupted Community Medical Center in Falls City, Nebraska, diverting critical patients and forcing staff to use paper.

 SolarWinds has issued an urgent security advisory for a high-severity vulnerability in its Access Rights Manager (ARM) product, tracked as CVE-2026-28326. The flaw enables unauthenticated attackers to execute arbitrary code remotely on affected systems, posing a serious risk to organizations using the identity and access governance platform.  The vulnerability arises from a hardcoded static key embedded in SolarWinds Access Rights Manager 2026.2 and all earlier releases. Because the key is static and known, an attacker within adjacent network access can exploit it to bypass authentication entirely and run malicious code with high privileges. SolarWinds rates the issue 8.8 (High) under CVSS v3.1, reflecting severe impacts on confidentiality, integrity, and availability.  Patch availability and upgrade path  SolarWinds has released a fixed version, Access Rights Manager 2026.2.1, which removes the hardcoded key and mitigates the remote code execution risk. Customers are advised to upgrade immediately to 2026.2.1 or later. The advisory, first published on September 17, 2026, includes a downloadable PDF with technical details and recommends that administrators verify their current version and schedule emergency patching where ARM is deployed.  Given the “unauthenticated” and “remote code execution” characteristics, this bug is especially dangerous in environments where ARM is exposed to internal networks or poorly segmented zones. An attacker who gains adjacent network access—such as via a compromised workstation or rogue device—could leverage the static key to take control of the ARM server, potentially escalating to broader identity management systems. The CVSS vector (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates low attack complexity and no need for user interaction, amplifying the urgency for remediation.  Safety tips  Organizations using SolarWinds Access Rights Manager should treat CVE-2026-28326 as a priority patching target. Immediate steps include: confirming the installed ARM version; isolating ARM servers from untrusted network segments; applying the 2026.2.1 update; and monitoring logs for suspicious authentication bypass attempts. Security teams should also review network access controls and consider threat-hunting activities focused on ARM-related processes. As with any identity management platform compromise, the downstream risk to Active Directory and other directories is significant, making rapid mitigation essential.

Dell patched multiple critical flaws in its Secure Connect Gateway on August 31, 2026. The most severe Dell Secure Connect Gateway vulnerability, CVE-2026-80172, scores a 9.8 CVSS. It lets an unauthenticated attacker forge admin tokens and gain unauthorized access. Two other critical bugs enable remote code execution and root-level takeover. Why this matters Secure Connect Gateway (SCG) connects Dell hardware to Dell support services.

JACKSON, Ala. (WKRG) — Jackson High School administrators are pressing charges after several people illegally came into the school's gym, leaving a broken door and trash. According to school principal Jackie Daffin Jr., the broken doors will no longer lock. "Please be aware that the Jackson High School gym is not a public facility, and [...]

Cloud Native, eBPF-based Networking, Observability, and Security

42Gears SureAccess is designed to protect organizations from unauthorized access, data breaches, and insider threats.

Critical CVE-2024-10905 in SailPoint's IdentityIQ (CVSS 10.0) risks unauthorized file access. Update now

Casio Computer Co., Ltd., a renowned Japanese electronics manufacturer, has confirmed a significant cybersecurity breach that occurred on October 5, 2023.

High-severity vulnerability in Rockwell Automation ControlLogix devices could allow unauthorized CIP commands. Urgent updates available to patch secur

A vulnerability in OpenStack's Nova component has been identified, potentially allowing hackers to gain unauthorized access to cloud servers.

Hackers have claimed unauthorized access to Fortinet devices across various companies, a threat to corporate security infrastructures.

YouTube video by UskoKruM2010

Identity thieves are favoring device takeovers over scams, according to the latest trends report released Tuesday by the Identity Theft Re...

Ariana Grande has filed a John Doe lawsuit in Los Angeles Superior Court, claiming 45 unreleased songs were hacked and leaked in 2023 alone. The long-term breach targeted her staff and collaborators,

Newton County Schools took systems offline after unauthorized network activity days before classes begin.

Northwest Iowa Community College disclosed that unauthorized activity discovered during a 2025 network disruption may have exposed personal data.