Claire Security
Security News
What changed this week for security teams in Europe and Southeast Asia: exploited vulnerabilities, regulation and what to do next.
Apple fixes CoreGraphics flaw CVE-2026-86950 used in targeted attacks
iOS 26.7.1 and macOS updates fix an out-of-bounds write that Apple says may have been exploited against specific individuals. Update managed devices promptly.
Cisco Catalyst SD-WAN Manager flaw CVE-2026-76504 gives attackers admin access
An exploited authentication bypass in Cisco Catalyst SD-WAN Manager (CVSS 9.8) affects every deployment and has no workaround. Upgrade to a fixed release now.
EU Cyber Resilience Act reporting duties now apply to manufacturers
Since 11 September 2026, makers of products with digital elements must report exploited vulnerabilities and severe incidents within 24 hours via ENISA's platform.
FortiMail zero-day CVE-2026-104286 exploited before a patch was available
Fortinet confirms attackers are exploiting a critical FortiMail flaw that allows unauthenticated file writes. Apply the workaround now and check for signs of compromise.
Pentagon personnel data breach went unnoticed for nine months
Unauthorised users read unencrypted personal data on a Pentagon file-sharing system from October 2025 to July 2026. About 3 million people are affected.
Singapore: Cyber Trust Mark deadline for managed SOC providers is 31 December 2026
Singapore requires managed SOC providers, pen testers and CII auditors to hold the Cyber Trust Mark by end-2026, and CII owners by end-2027.
China-aligned TA419 targets AI policy experts with fake Microsoft sign-in windows
Proofpoint reports TA419 impersonating former US officials to lure AI experts at think tanks, universities and law firms into adversary-in-the-middle phishing.