LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Rti

6 CVEs published in the last four months and 12 stories. Exploited flaws first.

Critical2
High4
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-308039.1criticalconnext microInteger Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers128d ago
CVE-2026-38949.1criticalconnext professionalOut-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue af128d ago
CVE-2026-308028.2highconnext microOut-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.This issue affects 128d ago
CVE-2026-24678.1highconnext professionalHeap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and128d ago
CVE-2026-26748.1highconnext professionalOut-of-bounds Write, Out-of-bounds Write, Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing S128d ago
CVE-2026-307998.1highconnext professionalMissing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows I128d ago

Filter the full tracker by Rti →

Our coverage of Rti

security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.

ai

Australian Gov't Weighs Mandatory AI Incident Reporting

The Australian government is reportedly considering the implementation of mandatory incident reporting requirements for companies developing and deploying frontier artificial intelligence systems. This move comes after an incident involving an "agentic attack" against the nation's Medicare systems, prompting a re-evaluation of regulatory frameworks for advanced AI.

vulnerability

Automation, AI agents or people? Sorting out who handles each security finding

A recent survey of 200 senior security and technology leaders reveals significant concerns about the escalating complexity of software security programs, particularly in the wake of increased AI adoption. Over half of the respondents, primarily from companies with 10,000 or more employees, anticipate struggles in simplifying their security operations if current practices persist.

fortinethigh

Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks

The FBI and Secret Service have issued a joint alert regarding "FortiBleed," a credential compromise campaign targeting Fortinet firewalls and VPN gateways. The agencies confirm that the campaign remains active and poses a significant threat, potentially leading to user lockouts and serving as an initial entry point for ransomware attacks.

security

Bipartisan backlash to ALPRs grows as two high-profile bills are introduced

Two new bills introduced in Congress highlight a growing bipartisan concern over artificial intelligence-powered automatic license plate recognition (ALPR) cameras, signaling increased political scrutiny for companies like Flock, Motorola, and Axon.

CVE-2026-104286critical

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

A critical-severity zero-day vulnerability, tracked as CVE-2026-104286, has been reported in Fortinet's FortiMail email security gateway. The flaw is described as a path traversal vulnerability that permits attackers to write arbitrary files to the underlying system. Organizations leveraging FortiMail deployments are advised to take immediate mitigation steps due to the active exploitation of…

CVE-2026-104286critical

U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Fortinet FortiMail vulnerability, identified as CVE-2026-104286, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, which carries a CVSS score of 9.8, is a path traversal vulnerability that attackers are reportedly exploiting in the wild.

CVE-2026-104286critical

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Fortinet has issued a warning regarding a critical vulnerability in its FortiMail email security platform, identified as CVE-2026-104286, which is actively being exploited in zero-day attacks. The flaw, rated with a CVSS score of 9.8, affects the FortiMail management interface and could allow an unauthenticated attacker to execute arbitrary code or commands.

CVE-2026-104286high

Fortinet FortiMail Path Traversal Flaw Exploited Same Day as Disclosure

A path traversal vulnerability in Fortinet FortiMail was exploited on the same day it was disclosed, leaving no patch window for affected organizations.

cloud

Post-quantum website certificates from Cloudflare are scheduled for early 2027

Cloudflare intends to establish itself as a public certificate authority (CA), an entity responsible for issuing the digital certificates websites utilize for traffic encryption and identity verification. The company has announced plans to issue both conventional certificates and a post-quantum variant known as Merkle Tree Certificates (MTCs), with production MTC issuance anticipated for the…

nation-state

Certificate failures can cost firms over $250,000

Enterprises face significant challenges and financial risks due to inadequate digital certificate management, with a substantial number experiencing costly service outages from expired or mismanaged certificates. A recent report indicates that nearly one in four organizations reported their most severe certificate incident cost over $250,000.