EXEO Threat Intelligence

Threat advisories that tell you what to do next

Curated, de-identified advisories powered by Argos. What the threat is, who is exposed, and the actions that reduce your risk.

Discover Argos Browse advisories

Latest threat advisories

View all advisories →
CRITICAL October 15, 2026 Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center,… MEDIUM October 14, 2026 Cisco patches new Secure Email Gateway zero-day exploited in attacks HIGH October 14, 2026 CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows (CVE-2026-40058)

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft Office Files settings. An update is available immediately for versions 7.34 and above, 7.32 LTS, and 7.16 for Windows 7/2008 R2 systems. The Falcon sensor for Mac, Linux, and Legacy Systems are not affected. This vulnerability could expose an arbitrary file write to protected locations from an unprivileg

Read More >
HIGHSeptember 15, 2026

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability CVE-2026-

Read More >
HIGHSeptember 9, 2026

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. These include 723 flaws in Windows, 111 in Office and Office 2016, 62 in SQL, and 22 in Developer Tools. Of these, over 110 shortcomings have been assigned a critical severity rating.

Read More >
CRITICALSeptember 9, 2026

Patch Tuesday – September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday , including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published

Read More >
HIGHSeptember 8, 2026

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member (CVE-2026-82064)

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion’s assumptions about internal state do not hold for all member configurations, causing the server process to terminate.

Read More >
HIGHSeptember 8, 2026

Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM (CVE-2026-81963)

Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset’s internet exposure and e

Read More >
CRITICALSeptember 8, 2026

Get in touch

We respond within 1 hour on weekdays
Exeo Logo White Transparent