Tag: network
-
10 Browser Security Vendors Making Moves In 2026
Among the top browser security vendors making AI and agent security moves in 2026 include CrowdStrike, Palo Alto Networks and Zscaler, along with Microsoft, Google and Cyera. First seen on crn.com Jump to article: www.crn.com/news/security/2026/10-browser-security-vendors-making-moves-in-2026
-
10 Browser Security Vendors Making Moves In 2026
Among the top browser security vendors making AI and agent security moves in 2026 include CrowdStrike, Palo Alto Networks and Zscaler, along with Microsoft, Google and Cyera. First seen on crn.com Jump to article: www.crn.com/news/security/2026/10-browser-security-vendors-making-moves-in-2026
-
Major Yandex data center in Russia hit by Ukrainian drone strike
A drone strike on a large Yandex data center caused a significant disruption to the Russian tech giant’s network, with connectivity reportedly falling to around 70 percent of normal levels. First seen on therecord.media Jump to article: therecord.media/yandex-russia-drone-ukraine
-
Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root
Cisco has disclosed three critical vulnerabilities in its Nexus 3000 and 9000 Series switches that could allow unauthenticated remote attackers to execute arbitrary code with root privileges. Successful exploitation could crash processes, trigger device reloads, and cause denial of service, disrupting network availability. Published on October 7, 2026, advisory cisco-sa-ngoam-rce-LWKQ4BU identifies three vulnerabilities: CVE-2026-76485, CVE-2026-76486,…
-
Critical Splunk Enterprise Vulnerability Lets Unauthenticated Attackers Execute OS Commands
Splunk has addressed a critical vulnerability in Splunk Enterprise that allows unauthenticated attackers to execute operating system commands through the Patroni REST API on a search head cluster member. This issue, tracked as CVE-2026-76268, has a CVSS v3.1 score of 9.8 and was disclosed in advisory SVD-2026-1001 on October 7, 2026. Successful exploitation requires network…
-
ChainDrop and PolinRider Use Blockchain C2 to Steal Cloud and CI/CD Credentials
Tags: access, blockchain, cloud, control, credentials, cyber, endpoint, infrastructure, korea, network, north-korea, open-source, service, threat, wormThreat actors are increasingly using blockchain networks as resilient command-and-control infrastructure to steal cloud credentials from developer endpoints and CI/CD environments. Recent campaigns involving the ChainDrop npm worm and the North Korea-linked PolinRider operation show how poisoned open-source packages can harvest short-lived cloud tokens, service-account credentials, deployment secrets, and source-code access tokens while resolving attacker…
-
Cisco quantum network controller lets apps order entanglement on demand
Cisco has built a Quantum Network Controller, a research prototype that lets an application ask a quantum network for entanglement and leaves the network to work out the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/08/cisco-quantum-network-controller-research-prototype/
-
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company’s network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions.SonicWall rates it 10.0 on the CVSS scale and says it has…
-
How DNS, Firewalls and Endpoint Tools Block Websites
Website filtering can be enforced at four points in a request’s lifecycle. What each layer sees, what routes around it, and why network filters miss traffic. First seen on hackread.com Jump to article: hackread.com/how-dns-firewalls-endpoint-tools-block-websites/
-
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed version is available.The flaw is in LMCache’s multiprocess mode, where the cache runs as a standalone server that LLM workers reach over…
-
EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data
Ernst & Young (EY) has warned that a data breach exposed personal and financial information belonging to clients of Goldman Sachs’ wealth management division and Man Group. The incident involved a platform supporting EY’s tax services, not the financial firms’ own networks, according to client notifications reported by the Financial Times. The latest disclosures expand…
-
SmartConvention 2026 sicherer Betrieb kritischer öffentlicher Infrastrukturen
Extreme Networks präsentiert auf der Smart-Country-Convention vom 13. bis 15. Oktober 2026 in Berlin sichere Netzwerklösungen für kritische Anwendungen im öffentlichen Sektor. Ob in Schulen oder im privaten Umfeld: Die Erwartungen an nahtlos funktionierende digitale Services waren noch nie höher. Dazu zählen beispielsweise digitale Verwaltungsangebote, Cloud-Anwendungen und Lernplattformen insbesondere im Hinblick auf den Digitalpakt […]…
-
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways.”The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat First seen…
-
Partisan Zmiy Malware Campaign Uses Telegram and DNS Tunneling to Target Healthcare Networks
A prolonged Partisan Zmiy intrusion into a medical organization, exposing an updated malware toolkit that combined Telegram command channels, DNS tunneling, and scheduled payload execution. Investigators joined the response in December 2025 and traced the earliest evidence of compromise to early 2024, indicating approximately two years of access without observed destructive activity. The organization maintained…
-
Even with OT network visibility, critical infrastructure operators struggle with legacy equipment
Large critical infrastructure operators run seven separate security tools on average, and most still cannot see every asset on their operational technology (OT) networks. That … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/07/ot-network-visibility-challenges/
-
Hadrian Expands Offensive Security Platform With $40M Raise
Platform Expansion Will Move Beyond External Scanning Into Internal Network Defense. Dutch startup Hadrian closed a $40 million Series B funding round to expand its offensive security platform into internal attack-path testing, agentic AI risk detection and autonomous remediation that can proactively implement controls to stop attacks. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/hadrian-expands-offensive-security-platform-40m-raise-a-33026
-
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection.Threat actors are known to name their malicious software after a legitimate operating system component or a process as a defense evasion measure. By borrowing the…
-
Osaka Metropolitan University cancels classes after suspected ransomware attack
Osaka Metropolitan University said on Tuesday that the outage left its internal network, email and a range of administrative and academic systems unavailable. First seen on therecord.media Jump to article: therecord.media/osaka-university-cancels-classes-ransomware
-
Former Employee Sentenced for Damaging Employer’s Windows Network Infrastructure
A former infrastructure engineer has been sentenced to 32 months in federal prison for damaging his employer’s computer network and demanding a ransom in Bitcoin. Daniel Rhyne, 59, of Kansas City, Missouri, received the sentence from U.S. District Judge Michael A. Shipp on September 28, 2026, in Trenton, New Jersey. Rhyne previously pleaded guilty to…
-
Engineer sentenced for locking over 3,000 devices on employer network
A former core infrastructure engineer at an industrial company headquartered in New Jersey was sentenced to 32 months in prison for locking thousands of devices on his employer’s network in a ransomware-style attack. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/engineer-sentenced-for-locking-thousands-of-devices-on-employer-network/
-
Midnight Blizzard Uses Captive Portals to Deliver CornFlake RAT and Steal Traveler Credentials
Storm-2945, a Midnight Blizzard subcluster, has resumed CaptiveCrunch, an espionage campaign abusing hospitality Wi-Fi networks to infect travelers and compromise corporate accounts. An October 5, 2026 update confirms renewed activity observed on September 29, including deployment of a Rust variant of the CornFlake infostealer, with characteristics consistent with continued AI-enabled malware development. The resurgence likely…
-
Midnight Blizzard Uses Captive Portals to Deliver CornFlake RAT and Steal Traveler Credentials
Storm-2945, a Midnight Blizzard subcluster, has resumed CaptiveCrunch, an espionage campaign abusing hospitality Wi-Fi networks to infect travelers and compromise corporate accounts. An October 5, 2026 update confirms renewed activity observed on September 29, including deployment of a Rust variant of the CornFlake infostealer, with characteristics consistent with continued AI-enabled malware development. The resurgence likely…
-
ClingSTUN Malware Turns Vulnerable IoT Devices Into Persistent Remote Proxy Nodes
ClingSTUN, a Linux backdoor that exploits unpatched internet-facing devices and converts them into persistent, remotely controlled proxy nodes. The malware combines startup persistence, process concealment, competitor termination, and remote command execution with legitimate STUN infrastructure to support connectivity through network address translation. The research published October 5 documents three campaign periods with changing payload servers…
-
ClingSTUN Malware Turns Vulnerable IoT Devices Into Persistent Remote Proxy Nodes
ClingSTUN, a Linux backdoor that exploits unpatched internet-facing devices and converts them into persistent, remotely controlled proxy nodes. The malware combines startup persistence, process concealment, competitor termination, and remote command execution with legitimate STUN infrastructure to support connectivity through network address translation. The research published October 5 documents three campaign periods with changing payload servers…
-
ClingSTUN Malware Turns Vulnerable IoT Devices Into Persistent Remote Proxy Nodes
ClingSTUN, a Linux backdoor that exploits unpatched internet-facing devices and converts them into persistent, remotely controlled proxy nodes. The malware combines startup persistence, process concealment, competitor termination, and remote command execution with legitimate STUN infrastructure to support connectivity through network address translation. The research published October 5 documents three campaign periods with changing payload servers…
-
Netzwerk-Infrastrukturen und Cybersecurity-Lösungen aus einer Hand
Rohde & Schwarz Networks and Cybersecurity stellt erstmals unter der neuen Firmierung auf der it-sa aus. Mit dem im Juli 2026 erfolgten Zusammenschluss von Lancom Systems und Rohde & Schwarz Cybersecurity wird Netzwerk- und Cybersecurity-Kompetenz in einem Unternehmen gebündelt: Auf der it-sa erwartet Messebesucher in Halle 9, Stand 524 ein integriertes Portfolio, das die gesamte…
-
New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic
Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South Korea and Taiwan First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/smtp-linux-backdoors-network-edge/
-
Belarusian hacktivists spent two years inside Russian healthcare network, researchers say
Russian cybersecurity researchers attributed a quiet two-year espionage campaign to the Belarusian Cyber Partisans, a group better known for public attacks against governments and infrastructure. First seen on therecord.media Jump to article: therecord.media/belarusian-hacktivists-two-years-Russian-healthcare-network
-
Google Gemini to Gain Full Computer Access With New Permission
Google is reportedly testing a new Gemini Desktop feature that could give its AI agent extensive control over a user’s Mac. This includes access to files, interaction with installed applications, and network communication, all with fewer prompts requiring user approval for each action. Currently, Google has not publicly released this capability, and it has not…
-
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling.”Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinary STUN behavior into a practical command-and-control channel,” Nozomi Networks said in a…