Weekly Threat Bulletin - October 7th, 2026
F5, Wednesday, October 7th, 2026
F5 Labs' weekly bulletin covers exploited FortiMail and NetScaler flaws, AWS Loom and SageMaker fixes, and Warlock ransomware.
F5 Labs' weekly threat bulletin leads with a critical, actively exploited Fortinet FortiMail path traversal flaw (CVE-2026-104286, CVSS 9.8), with workarounds until fixed versions ship.
It also covers a Citrix NetScaler zero-day (CVE-2026-88779) exploited via SAML, AWS patches for a Loom AI agent authentication bypass and a SageMaker command injection, and China-nexus Longlegs using SharePoint flaws to deploy Warlock ransomware.
Anthropic's Mythos model discovering an actively exploited Rejetto HFS flaw (CVE-2026-61500) also features, and each entry includes IOCs and mitigation advice.