In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...

Partner with the world's largest commercial agentic SOC.

Tailored security expertise and guided risk mitigation.

Learn about CVE-2026-85102 and CVE-2026-85103, two critical Check Point VPN vulnerabilities that could allow unauthenticated remote code execution on exposed gateways and firewalls.

Learn about CVE-2026-84869, an actively exploited ConnectWise ScreenConnect vulnerability that could allow unauthorized file transfers, remote code execution, and endpoint compromise through active ...

Threat Summary A maximum-severity (CVSS 10.0) vulnerability CVE-2026-86218 has been discovered in N-able N-central prior to build 2026.3.1.14. This flaw allows unauthenticated attackers to execute ...

Microsoft's September 2026 Patch Tuesday addresses 974 vulnerabilities, including two actively exploited zero-days and more than 110 critical flaws affecting Windows, Exchange, SharePoint, SQL Server, ...

FalconFlank is a CrowdStrike Falcon zero-day vulnerability that enables SYSTEM-level privilege escalation. Learn the risks, affected environments, and recommended mitigation steps.

Learn about CVE-2026-50656 (RoguePlanet/ShieldBreak), a Microsoft Defender zero-day privilege escalation vulnerability that bypasses previous fixes and puts Windows ...

Arctic Wolf is tracking an ongoing Microsoft 365 phishing campaign affecting healthcare, education, manufacturing, government, professional services, and other sectors across the United States, Canada ...

Learn about critical SolarWinds Web Help Desk vulnerabilities CVE-2026-28323 and CVE-2026-28299, including patch guidance, mitigation steps, and security recommendations.

Learn how to protect N-able N-central from active exploitation of CVE-2026-18556 and CVE-2026-18577 with patching, threat hunting, and mitigation guidance.