From the Desk of Melissa Irace, CISO
Remote access infrastructure, actively exploited vulnerabilities, and cyber-related operational disruptions remain primary threats. Organizations should validate exposure, strengthen identity and access controls, and ensure incident readiness to maintain business continuity.
Executive perspective
This week’s threat landscape highlights continued targeting of remote access systems, actively exploited vulnerabilities, and cyber incidents causing significant business disruption.
These threats underscore the importance of maintaining strong security controls, validating exposure, and ensuring operational resilience across critical systems, third-party services, and user identities.
Proactive risk reduction, continuous monitoring, and incident readiness remain essential to protect your organization and the communities you serve.
Melissa’s perspective
“Cyber threats are evolving faster, targeting the systems and services organizations rely on. Resilience comes from visibility, validation, and preparation, before an incident impacts your people, operations, and mission.”
This week’s top threats
01 · Critical
SonicWall SMA under active exploitation
A maximum-severity SSRF vulnerability (CVE-2026-8879) in SonicWall Secure Mobile Access (SMA) devices is being actively exploited, allowing attackers to deploy web shells, steal credentials, and gain unauthorized access to networks.
How Intuitus helps
- External Attack Surface Assessments
- Penetration Testing as a Service (PTaaS)
- Network and Firewall Security Reviews
- MDR and DFIR Services
02 · Critical
Microsoft October Patch Tuesday zero-days
Microsoft addressed an unusually high number of vulnerabilities, including an actively exploited Windows Shell security feature bypass (CVE-2026-9695) and a .NET Framework zero-day (CVE-2026-103839).
How Intuitus helps
- Vulnerability Assessments
- CyberRisk360
- Endpoint Security Validation
- MDR Services
03 · High
Ivanti Connect Secure exploitation
Attackers are exploiting a chain of Ivanti Connect Secure vulnerabilities to achieve authentication bypass, remote code execution, and credential theft, including attempts to obtain Active Directory credentials and BitLocker keys.
How Intuitus helps
- Identity Security Assessments
- Penetration Testing (PTaaS)
- DFIR Services
- MDR and Log Monitoring
04 · High
Ahold Delhaize cybersecurity incident
Ahold Delhaize reported a cybersecurity issue, taking certain systems offline, resulting in multi-day disruptions to customer-facing websites and applications across several retail brands.
How Intuitus helps
- Incident Response Planning
- Tabletop Exercises
- SOC Monitoring and MDR
- Business Continuity Assessments
05 · Medium
Large-scale phishing infrastructure
A major phishing network (e.g., YaraStop) is distributing billions of malicious messages, enabling large-scale credential theft, account takeover, and subsequent attacks.
How Intuitus helps
- Email Security Assessments
- Dark Web Monitoring (ParanoidLabs)
- Identity Security Reviews
- MDR Services
Our approach
We help organizations understand their risk, validate security controls, and build practical roadmaps that strengthen resilience, reduce operational impact, and keep your business and community moving forward.
Five actions for executives this week
- Validate critical systems. Confirm exposure, patch status, and security controls for remote access across your ecosystem.
- Review access and privileges. Audit administrative accounts, VPN access, and multi-factor payment security measures.
- Strengthen detection and monitoring. Ensure visibility across network, endpoint, cloud, and identity platforms for faster response.
- Ensure operational resilience. Validate incident response plans and critical service dependencies across operations.
- Engage in a risk reduction roadmap. Prioritize mitigation, testing, and long-term security investments to reduce supply chain and partner-related risks.