Saturday, October 3, 2026 · 2 MIN READ
Patch First: Exploited Flaws and Critical Server Risks
IT BRIEFING FOR BUSINESSES
Today’s briefing highlights active attacks involving Zammad and SharePoint, plus critical fixes for self-hosted GitLab AI gateways and Dell container tools. Other reports underline the importance of watching cloud-service activity, protecting sensitive information, and keeping track of your technology.
Zammad and SharePoint: Put Exploited Flaws First
CISA added two Zammad vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-102489, involving session fixation, and CVE-2026-102490, involving improper privilege management. Separately, researchers report that Warlock continues to exploit SharePoint flaws in attacks that disable security tools and deploy ransomware. The observed SharePoint attacks affected critical infrastructure, government, and education organizations in Portuguese- and Spanish-speaking countries.
For businesses using either product, these reports make patch review a priority rather than a routine housekeeping task. Ask your IT provider to check whether your installations are affected and prioritize applicable security updates.
SOURCES:CISA Advisories The Hacker News
Self-Hosted GitLab AI Gateways Need a Fix
GitLab patched a critical, 9.9-rated flaw in its AI Gateway, the service that connects GitLab to AI models. Under certain conditions, a logged-in user with Duo Agent Platform access could run commands on the gateway. Only organizations hosting their own gateway need to act on this advisory.
If your development team runs that setup, this is a security issue for the gateway—not just an AI feature bug. Have the team confirm it is running a fixed gateway version: 19.2.4, 19.3.2, or 19.4.1.
SOURCES:The Hacker News
Dell Container Tools Get Critical Security Updates
Dell released updates for multiple critical flaws in its Container Storage Modules, or CSM. The reported issues can enable unauthenticated administrator access and root access on Kubernetes nodes. One flaw, CVE-2026-63688, received a severity score of 10.0 and involves missing authentication in a storage authorization service.
For businesses running this technology, the potential impact reaches the systems supporting container-based applications. Ask whoever manages your Kubernetes environment to check Dell’s advisory and apply the relevant CSM updates.
SOURCES:The Hacker News
Espionage Reports Highlight Trusted Channels
MI5 warned that more than 100 U.K.-linked academics had helped advance Chinese intelligence gathering through research funded by an institute it linked to China’s state security service. In a separate report, Cisco Talos identified a China-nexus campaign targeting government and policy organizations across Asia with the Antino backdoor, which uses Outlook and OneDrive for command-and-control communications.
These reports do not establish that Ohio small businesses were targeted, but they highlight risks involving research relationships and familiar online services. One practical step is to ask your IT provider how it reviews unusual Outlook and OneDrive activity rather than assuming traffic to those services is safe.
SOURCES:The Hacker News The Hacker News
Sensitive Information Rules Need to Be Clear
OpenAI parted ways with three safety-team members over violations of its rules for accessing and handling sensitive company information, according to reporting by The Wall Street Journal. A company spokesperson confirmed the departures and the policy violations.
For business owners, this is a reminder that information handling is a staff responsibility as well as a technical concern. Review your written rules with employees so they know what information is sensitive, who may access it, and where it may be shared.
SOURCES:The Hacker News
Know What You Run Before Adding More Tools
A cybersecurity overview describes how expanding cloud infrastructure, AI, and distributed systems are making technology environments more complex. It points to continuous visibility, control, and risk response as priorities as organizations manage more identities, devices, data, and internet-facing systems.
For a smaller business, a useful starting point is knowing what needs protection. Have your IT lead update an inventory of business systems, accounts, and internet-facing services, with a named owner for each.
SOURCES:The Hacker News