Today, attackers are targeting vulnerabilities in Ivanti Connect Secure and GitLab, as well as Cisco Secure Firewall ASA Software. Small businesses should review their systems for these risks and apply any available patches.
Ivanti Connect Secure (CVE-2026-118527)
Ivanti Connect Secure is a software used for network management. Attackers can upload files with attacker-controlled content, which could lead to unauthorized access. Businesses should ensure they have the latest updates for Ivanti Connect Secure to protect against this risk.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Ivanti Connect Secure (CVE-2026-111357)
Ivanti Connect Secure allows attackers to escalate privileges. Businesses should verify if they are using this function and consider strengthening their authentication measures to prevent unauthorized access.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
GitLab Community Edition and Enterprise Edition (CVE-2026-97229)
GitLab is a platform for version control and continuous integration. Attackers can execute arbitrary code, leading to potential data breaches. Businesses should review their CI/CD configurations and ensure they are using the latest GitLab updates to mitigate this risk.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418)
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software can be exploited to cause a denial of service. Businesses should check their firewall configurations and consider implementing additional security measures to prevent unauthorized access.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Tip of the day: Turn on automatic updates
Most of the attacks in this list work only on software that has not been updated. Let your phone, computer and browser update themselves, and restart when they ask.
Doing it once, properly
Saving now often means paying twice: cut-price IT work is frequently rebuilt from the start, and the outage or breach before the rebuild is the expensive part.
Sources
- CISA Known Exploited Vulnerabilities catalogue
- CVE-2026-118527 on the National Vulnerability Database
- CVE-2026-111357 on the National Vulnerability Database
- CVE-2026-97229 on the National Vulnerability Database
- CVE-2026-76418 on the National Vulnerability Database
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.