Tag: advisory
-
Citrix Patches XenServer Vulnerabilities That Could Enable Host Compromise
Citrix has released security updates for XenServer 8.4 and XenServer 9. The updates fix several vulnerabilities, three of which could let a malicious privileged guest VM user compromise or crash the underlying host. Cloud Software Group rated the bulletin High severity. Citrix XenServer vulnerabilities According to the advisory published by Citrix on October 13, 2026…
-
SonicWall NSM Bugs Let Attackers Intercept Communications and Execute Commands
SonicWall has disclosed two vulnerabilities in its on-premises Network Security Manager (NSM) that could let authenticated attackers escalate privileges, intercept other users’ communications and run operating system commands. The company published the advisory, SNWLID-2026-0018, on October 14, 2026. The highest CVSS v3 score is 8.8 (High). SonicWall NSM vulnerabilities According to advisory SNWLID-2026-0018 published by…
-
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating system, Cisco said in an advisory on Wednesday.The attacker sends an email with a crafted attachment through the gateway and, if it succeeds, could then run commands as root. The appliance…
-
Windows BitLocker Vulnerabilities Could Allow Attackers to Bypass Security Protections and Escalate Privileges
Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections under various access conditions. Microsoft is the assigning authority, with a release date of October 13, 2026, and all three vulnerabilities are rated Important. Two require existing local privileges, while the third requires physical access. We…
-
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it.The flaw was in the feature that converts a personal account into an organization,…
-
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP’s official Python client for BTP services. An attacker must…
-
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner.LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12.The chain was tested on two TV models,…
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 118
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure UAC-0277: ClickFix on compromised websites to spread LUNEXSTEALER MALFEX A malicious npm postinstall no advisory has caught for fourteen months Canto incognito: tracking the PoeLLM malware […]…
-
Critical Citrix NetScaler Vulnerability Allows Remote Code Execution Attacks CVSS 9.5
Citrix has disclosed a critical memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that could enable remote code execution or denial of service under specific configuration conditions. This vulnerability, tracked as CVE-2026-107406, carries a CVSS v4.0 base score of 9.5, prompting an urgent upgrade advisory for affected customer-managed deployments. The security bulletin, CTX697191, identifies…
-
FBI Warns Chinese Hackers Use Automated Tools and Botnets to Steal Sensitive Data
Tags: advisory, botnet, china, cyber, cybersecurity, data, exploit, government, group, hacker, healthcare, infrastructure, international, technology, tool, vulnerabilityThe FBI and international cybersecurity agencies have warned about hackers linked to the Chinese government who use automated vulnerability scanning, large-scale botnets, and hands-on exploitation to steal sensitive information worldwide. A joint advisory released on October 8, 2026, identified China-based Integrity Technology Group as a facilitator of operations targeting critical infrastructure, government agencies, healthcare systems,…
-
FBI Seizes Domains Used in Flax Typhoon Attacks
US Authorities Say Infrastructure Supported Scanning, Phishing and Data Theft. The FBI seized seven domains allegedly used by China-linked hackers to scan critical infrastructure, deliver malware and steal files. A joint advisory urges organizations to hunt for lingering access. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fbi-seizes-domains-used-in-flax-typhoon-attacks-a-33049
-
FBI Seizes Domains Used in Flax Typhoon Attacks
US Authorities Say Infrastructure Supported Scanning, Phishing and Data Theft. The FBI seized seven domains allegedly used by China-linked hackers to scan critical infrastructure, deliver malware and steal files. A joint advisory urges organizations to hunt for lingering access. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fbi-seizes-domains-used-in-flax-typhoon-attacks-a-33049
-
FBI Seizes Domains Used in Flax Typhoon Attacks
US Authorities Say Infrastructure Supported Scanning, Phishing and Data Theft. The FBI seized seven domains allegedly used by China-linked hackers to scan critical infrastructure, deliver malware and steal files. A joint advisory urges organizations to hunt for lingering access. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fbi-seizes-domains-used-in-flax-typhoon-attacks-a-33049
-
FBI Seizes Domains Used in Flax Typhoon Attacks
US Authorities Say Infrastructure Supported Scanning, Phishing and Data Theft. The FBI seized seven domains allegedly used by China-linked hackers to scan critical infrastructure, deliver malware and steal files. A joint advisory urges organizations to hunt for lingering access. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fbi-seizes-domains-used-in-flax-typhoon-attacks-a-33049
-
Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available
A critical vulnerability in LMCache allows unauthenticated attackers to execute arbitrary code against reachable multi-process deployments by exploiting unsafe Python pickle deserialization. This flaw is tracked as CVE-2026-105192 and has a CVSS score of 9.8. JFrog published an advisory and a public proof-of-concept exploit on October 7, 2026, stating that no fixed release was available…
-
Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root
Cisco has disclosed three critical vulnerabilities in its Nexus 3000 and 9000 Series switches that could allow unauthenticated remote attackers to execute arbitrary code with root privileges. Successful exploitation could crash processes, trigger device reloads, and cause denial of service, disrupting network availability. Published on October 7, 2026, advisory cisco-sa-ngoam-rce-LWKQ4BU identifies three vulnerabilities: CVE-2026-76485, CVE-2026-76486,…
-
Critical Splunk Enterprise Vulnerability Lets Unauthenticated Attackers Execute OS Commands
Splunk has addressed a critical vulnerability in Splunk Enterprise that allows unauthenticated attackers to execute operating system commands through the Patroni REST API on a search head cluster member. This issue, tracked as CVE-2026-76268, has a CVSS v3.1 score of 9.8 and was disclosed in advisory SVD-2026-1001 on October 7, 2026. Successful exploitation requires network…
-
Atlassian Warns of Critical Flaw Affecting Eight Self-Managed Products
Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting Confluence Data Center and seven other self-managed products. The advisory, published on October 5, 2026, warns that every version of the affected software is exposed and urges administrators to act right away, either by upgrading or by putting temporary safeguards in place. First seen…
-
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices and is locking out admins. The FBI and the U.S. Secret Service issued a joint advisory about FortiBleed, and the headline number alone is worth sitting with: more than 86,644 compromised Fortinet FortiGate devices across 194 countries, according to…
-
Elastic Patches 14 Security Flaws, Including One Enabling Cross-Tenant Data Interception
Elastic published 14 security advisories addressing various vulnerabilities in Elasticsearch, Kibana, and Elastic Agent/Endpoint. Among these, a high-severity Kibana authorization bypass vulnerability allows for cross-tenant data interception. Other issues include information disclosure and denial-of-service weaknesses in Elasticsearch, along with a flaw in Elastic Endpoint that affects Windows protection capabilities. The advisory list consists of ten…
-
Elastic Patches 14 Security Flaws, Including One Enabling Cross-Tenant Data Interception
Elastic published 14 security advisories addressing various vulnerabilities in Elasticsearch, Kibana, and Elastic Agent/Endpoint. Among these, a high-severity Kibana authorization bypass vulnerability allows for cross-tenant data interception. Other issues include information disclosure and denial-of-service weaknesses in Elasticsearch, along with a flaw in Elastic Endpoint that affects Windows protection capabilities. The advisory list consists of ten…
-
Critical WatchGuard Endpoint Security Flaw Exposes Kernel and Process Memory
A critical vulnerability exists in WatchGuard endpoint security products that could allow a local, authenticated attacker to bypass driver authentication and access sensitive kernel and process memory. This vulnerability is tracked as CVE-2026-13043 and has a reported CVSS score of 9.3. It affects the Panda Kernel Memory Access Driver (pskmad.sys), as noted in an advisory…
-
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem was not connected to vulnerabilities reported last week that also caused alarm among cybersecurity experts. First seen on therecord.media Jump to article: therecord.media/us-australia-warn-of-latest-citrix-vulnerability
-
HPE Instant On AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands
HPE has released security updates for its Networking Instant On access points after identifying 18 vulnerabilities, including several critical flaws that could allow unauthenticated attackers to execute arbitrary code or commands with privileged operating-system access. These vulnerabilities are detailed in advisory HPESBNW05150 rev. 1 and affect Instant On AP software versions 3.4.1.0 and earlier. HPE…
-
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30.The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager’s API as the admin user. Fixed releases are available, and there…
-
Kiteworks lifts shutdown advisory after ‘credible threat intelligence’ from federal authorities
The company said it found and patched a previously unknown critical vulnerability in one product during the weekend shutdown, and has no indication it was exploited. First seen on cyberscoop.com Jump to article: cyberscoop.com/kiteworks-lifts-shutdown-advisory-after-credible-threat-intelligence-from-federal-authorities/
-
Kiteworks patches critical flaw, brings customer systems online
American tech company Kiteworks has lifted a precautionary advisory asking customers to shut down systems after patching a critical vulnerability. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/kiteworks-lifts-shutdown-warning-after-patching-critical-flaw/
-
Kiteworks lifts advisory after precautionary warning for customers to shut down systems
The firm had received information from law enforcement of a possible attack. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/kiteworks-lifts-advisory-warning-shut-zero-day/831508/