Cyberattack Law and Disclosure Digest for 2026-10-14
Key Facts
- Primary record digest compiled for 2026-10-14.
- Aggregates official announcements from DOJ, CISA, SEC EDGAR, and allied cyber agencies.
- All cited documents are in the public domain or official government publications.
Summary of official government advisories, court filings, and sanctions published on 2026-10-14.
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure ↗
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthentic
Swann Communications SWIFI-SE2KIC ↗
Summary
Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication.
The following versions of Swann Communications SWIFI-SE2KIC are affected:
- SWIFI-SE2KIC firmware <=2.0.22 (CVE-2026-107605, CVE-2026-107606, CVE-2026-107607)
CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
- CVE-2026-96951 Microsoft Windows Command Injection Vulnerability
- CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vul
Inductive Automation Ignition Software ↗
Summary
Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.
The following versions of Inductive Automation Ignition Software are affected:
- Ignition >=8.1.0|<=8.1.54 (CVE-2026-92817)
- Ignition >=8.3.0|<=8.3.8