The Critical Stack
Today: #56 in Technology, South Africa on our combined chart.
Chart positions today · New Zealand
Not on the United States charts we track today.
Not on the United Kingdom charts we track today.
Not on the Canada charts we track today.
Not on the Australia charts we track today.
Not on the Germany charts we track today.
Not on the Brazil charts we track today.
Not on the Mexico charts we track today.
Not on the New Zealand charts we track today.
Not on the Ireland charts we track today.
Not on the India charts we track today.
Not on the Japan charts we track today.
Not on the Philippines charts we track today.
If you like The Critical Stack, try…
Ranking history · New Zealand
Latest episodes
-
Federal Patch Order: Plex2Shell, Siemens and SiteGuard Chain Into Unauthenticated RCE
October 21, 2026 · 3 minCisa orders federal agencies to patch exploited Plex2Shell, Siemens and SiteGuard flaws that can be chained for unauthenticated remote code execution. Plus, cloud platform Zeabur shuts down after a second breach in two months, and a joint…
-
Signed, Trusted, and Compromised: Siemens ClickFix and the ConnectWise Backup Shutdown
October 20, 2026 · 3 minAttackers are turning trusted channels into attack paths: a genuine, signed Siemens Software Center delivers a RAT, and ConnectWise suspends Cloud Backup after a supply chain attack. Plus new ATT&CK coverage for AI abuse and MFA bypass…
-
Your Firewall Is the Foothold: SiteGuard WAF Under Active Attack
October 19, 2026 · 3 minAttackers are exploiting a SiteGuard web application firewall flaw to run commands as root or system, turning a security control into the way in. Plus, Dragos says fewer than ten percent of OT networks have adequate monitoring, and…
-
One Stolen Credential, One Hundred Seventy-Three Tenants: The ConnectWise Breach
October 18, 2026 · 3 minA single compromised ConnectWise credential gave attackers confirmed unauthorized sign-ins across one hundred seventy-three Microsoft 365 tenants, so it's time to audit the access your service providers hold. We also cover the ETS student…
-
Trusted Access, Turned Against You: Next.js RCE, a China-Linked BeyondTrust Zero-Day, and an AI Agent Gone Rogue
October 17, 2026 · 3 minTwo critical unauthenticated remote code execution flaws force an emergency Next.js patch, while a stolen-trust theme runs through hijacked edge devices, a BeyondTrust zero-day tied to China-linked actors, and an OpenAI model that spent…
Show 7 more episodesShow fewer episodes
-
BeyondTrust Zero-Day Lands as AI Agents Learn to Move Industrial Equipment
October 16, 2026 · 3 minA BeyondTrust Remote Support zero-day has been exploited since late August, so patch now and hunt for compromise back to that date. Plus, a kernel flaw that breaks VM isolation, a refrigeration attack that widens, AI agents moving real…
-
PAN-OS Root Exploit, a Ledger Reseller Implant, and an AI Agent's OTP Bypass
October 15, 2026 · 3 minPalo Alto patches a PAN-OS root code execution flaw that attackers are already exploiting, and Ledger traces its hardware supply-chain attack to one Southeast Asian reseller. Also: an AI agent finds a critical OTP bypass, and Citrix…
-
Ship AI Like a Medical Device
October 14, 2026 · 10 minA direct reading of this week's Critical Stack article. Read the original at: https://thecriticalstack.substack.com
-
Ivanti Zero-Day Hits Connect Secure as Microsoft Ships a Record Patch Batch
October 14, 2026 · 3 minIvanti Connect Secure is under active zero-day exploitation, so patch now and treat exposed VPN appliances as potentially compromised. Plus: Ahold Delhaize starts bringing systems back, AI compresses the attack timeline, and Microsoft's…
-
SonicWall Under Fire: One Hundred Thirty-Five Attacks Land After the Patch
October 13, 2026 · 3 minA critical SonicWall SMA one thousand flaw is already being exploited after its patch, so patch or isolate those appliances now. Also: a hardware implant in a Ledger wallet, a money-mule kingpin pleads guilty, and IonQ buys Elisity for up…
-
CyberXero Turns Claude Code on Ukraine as Bricksforge and Palo Alto Flaws Stay Open
October 12, 2026 · 3 minCyberXero used Claude Code in an ongoing campaign that stole more than six hundred twenty-eight thousand Ukrainian records. Meanwhile, unpatched edge and web-facing systems, from Bricksforge on WordPress to Palo Alto VPNs, remain the…
-
Agents at the Bank Door: ARTEX AI and Claude Agents Hit South Korea
October 11, 2026 · 3 minA hacker used ARTEX AI and Claude agents against South Korean banks, prompting an emergency government meeting. Plus, attackers are exploiting unpatched AhsayCBS backup servers, and a new NVIDIA GPU telemetry flaw shows how exposed AI…

United States
Australia
Brazil
Canada
Germany
India
Ireland
Japan
Mexico
Philippines
South Africa
United Kingdom