CYBER THREATCAST

Apply N-able N-central 2026.3 Hotfix 4 immediately on affected on-premises systems, then check for unauthorized System Administrator accounts and other signs of compromise. CVE-2026-86218 enables pre-authentication remote code execution and is actively exploited; CVE-2026-86206 and CVE-2026-86207 can reportedly be chained to create a controlled administrator account. Hosted environments were provider-patched, but limited appliance logging may complicate investigations.

Install Adobe’s emergency hotfix for CVE-2026-75650 on affected Adobe Commerce, Adobe Commerce B2B, and Magento Open Source systems, then rotate potentially exposed credentials and secrets. Multiple campaigns are exploiting the unauthenticated remote-code-execution flaw to install backdoors, droppers, PHP web shells, and a persistent Rust backdoor on online stores.

Deploy current Chrome updates across managed Windows, macOS, and Linux endpoints, ensuring Chrome 153 reaches version 153.0.8010.36/.37 or later, and verify update status for other Chromium-derived browsers. Google reported active exploitation of CVE-2026-85046 and CVE-2026-87491 in V8; crafted HTML can trigger arbitrary code execution within the browser sandbox.

Accelerate deployment of Microsoft’s Windows security updates, prioritizing systems exposed to local attacker activity and the fixes for CVE-2026-81963 and CVE-2026-85880. Both zero-days are actively exploited and can elevate a local attacker to SYSTEM; Microsoft’s update set addresses 974 vulnerabilities overall.

Withdraw Harmony tokens held in smart contracts within the stated three-day window and prepare eligible balances for migration to Ethereum. Harmony is winding down its blockchain after an exploit enabled unauthorized minting of three trillion ONE tokens and forced a rollback, making prompt action essential for Harmony users.