Topic

Enterprise Security: news, advisories and analysis

7 articlesUpdated 14 Oct 2026

CyberSecureToday covers Enterprise Security across 7 articles published between 14 Sep 2026 and 14 Oct 2026. The coverage includes 6 vulnerability advisories and 1 analysis or guidance piece. 6 advisories are rated critical or high severity, and 3 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Enterprise Security most often intersect with Remote Code Execution, Authentication Bypass and Microsoft, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Ivanti Endpoint Manager SQL Injection Enables Unauthenticated Code Execution”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Ivanti Endpoint Manager SQL Injection Enables Unauthenticated Code Execution
Ivanti patches critical SQL injection vulnerability CVE-2026-89310 in Endpoint Manager Core Server enabling unauthenticated remote code execution.
CST Editorial Desk14 Oct 20268 min read
InsightsCloud & SaaS
The Lethal Trifecta in Enterprise AI Agents: Why Input Filters Fail Against Tool Hijacking
An architectural analysis of the Lethal Trifecta in autonomous enterprise AI agents: untrusted input, autonomous execution, and access to privileged external tools.
CST Editorial Desk30 Sep 202611 min read
ThreatsCloud & SaaSHigh
Microsoft Outlook Memory Parsing Flaw Enables Remote Code Execution via Crafted Documents
Microsoft MSRC discloses high-severity 8.8 CVSS RCE flaw CVE-2026-70125 in Microsoft Outlook enabling arbitrary code execution via crafted compound documents.
CST Editorial Desk26 Sep 202614 min read
ThreatsCloud & SaaSCritical
Fortinet FortiPAM Authentication Bypass Enables Remote Session Hijacking and Traffic Proxying
Fortinet releases emergency fixes for critical CVSS 9.6 flaw CVE-2026-84388 in FortiPAM and its Chrome Extension, allowing remote attackers to hijack administrative sessions.
Daniel Okafor25 Sep 202618 min read
ThreatsCloud & SaaSCritical
Arista VeloCloud Orchestrator Zero-Day Exploited to Hijack SD-WAN Edge Gateways
Arista confirms active in-the-wild exploitation of CVSS 10.0 CVE-2026-93952, allowing unauthenticated attackers to hijack on-prem VeloCloud Orchestrators.
CST Editorial Desk23 Sep 202617 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Server Critical Deserialization Flaw CVE-2026-50522 Exploited in Active Attacks
CISA adds Microsoft SharePoint Server deserialization flaw CVE-2026-50522 (CVSS 9.8) to its KEV catalog following active exploitation against enterprise document farms.
Priya Raman16 Sep 202611 min read
ThreatsIndustrial & OTCritical
SAP Security Patch Day Addresses Critical NetWeaver Message Server Authentication Bypass
SAP released security updates for CVE-2026-58240, a CVSS 9.6 authentication bypass in NetWeaver AS Java/ABAP Message Server that permits enterprise takeover.
Aisha Noor14 Sep 20268 min read

Latest coverage

Ivanti Endpoint Manager SQL Injection Enables Unauthenticated Code Execution

The Lethal Trifecta in Enterprise AI Agents: Why Input Filters Fail Against Tool Hijacking

Microsoft Outlook Memory Parsing Flaw Enables Remote Code Execution via Crafted Documents

Fortinet FortiPAM Authentication Bypass Enables Remote Session Hijacking and Traffic Proxying

Arista VeloCloud Orchestrator Zero-Day Exploited to Hijack SD-WAN Edge Gateways

Microsoft SharePoint Server Critical Deserialization Flaw CVE-2026-50522 Exploited in Active Attacks

SAP Security Patch Day Addresses Critical NetWeaver Message Server Authentication Bypass