arcticwolf

PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...
arcticwolf

Check Point VPN Critical RCE Vulnerabilities CVE-2026-85102 & CVE-2026-85103

Learn about CVE-2026-85102 and CVE-2026-85103, two critical Check Point VPN vulnerabilities that could allow unauthenticated remote code execution on exposed gateways and firewalls.
arcticwolf

CVE-2026-84869: ConnectWise ScreenConnect Client Vulnerability Critical Remote Session File Transfer Exploitation Risk

Learn about CVE-2026-84869, an actively exploited ConnectWise ScreenConnect vulnerability that could allow unauthorized file transfers, remote code execution, and endpoint compromise through active ...
arcticwolf

Building an Agentic SOC So Your Team Doesn’t Have To

Explore how agentic SOCs use AI to automate security investigations, and why organisations are leveraging platforms like Arctic Wolf to achieve machine-speed cyber defense.
arcticwolf

CVE-2026-86218: Active Exploitation of N-able N-central: Critical Pre-Auth Remote Code Execution (RCE) Vulnerability

Threat Summary A maximum-severity (CVSS 10.0) vulnerability CVE-2026-86218 has been discovered in N-able N-central prior to build 2026.3.1.14. This flaw allows unauthenticated attackers to execute ...
arcticwolf

Microsoft Defender Patch Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)

Learn about CVE-2026-50656 (RoguePlanet/ShieldBreak), a Microsoft Defender zero-day privilege escalation vulnerability that bypasses previous fixes and puts Windows ...
arcticwolf

CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate Patching

Learn how to protect N-able N-central from active exploitation of CVE-2026-18556 and CVE-2026-18577 with patching, threat hunting, and mitigation guidance.
arcticwolf

CVE-2026-6875: Critical Remote Code Execution Vulnerability in ServiceNow AI Platform Urgent Mitigation Required

Threat Summary CVE-2026-6875 is a critical remote code execution (RCE) vulnerability in the ServiceNow AI Platform. The flaw allows unauthenticated attackers to escape the sandbox and execute ...
arcticwolf

CVE-2026-39808: Critical Fortinet FortiSandbox OS Command Injection Vulnerability

CRITICAL: Fortinet FortiSandbox CVE-2026-39808 OS command injection (CVSS 9.8) actively exploited. Public PoC available. Upgrade to 4.4.9+. Federal agencies: BOD 26-04 mandate applies.
arcticwolf

CVE-2026-15409, CVE-2026-15410: Security Bulletin: SonicWall SMA 1000 Series Zero-Day Vulnerabilities

SonicWall SMA1000 critical SSRF + code injection vulnerabilities (CVE-2026-15409/15410) exploited in the wild. Full device compromise risk. Immediate patching required.
arcticwolf

Active FortiBleed Campaign Impacting Fortinet Devices Across 194 Countries

In mid-June 2026, security researchers identified an active, large-scale credential compromise campaign affecting Fortinet FortiGate firewalls, dubbed FortiBleed.
arcticwolf

Microsoft Patch Tuesday Security Recap: June 2026 Edition

Threat Summary On June 9, 2026, Microsoft released its regular Patch Tuesday security update, fixing 206 vulnerabilities (with 39 rated Critical) affecting a broad spectrum of Microsoft products ...