SecurityTicks

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain 2026-09-02 at 13:53 By SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall’s William Perry and Adam Babis, […]

The DLP Network Discover Cluster Is Always Watching (So Your Team Doesn’t Have To) 2026-09-02 at 13:00 By Rupali Mankapure, CISSP, Dhananjay Dodke How continuous cluster monitoring and automatic Worker Node failover keep enterprise discovery scans running despite infrastructure disruptions This article is an excerpt from SECURITY.COM View Original Source

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends 2026-09-02 at 12:18 By Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and […]

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands 2026-09-02 at 12:10 By The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on August 28, with using roughly 255 fake accounts on a freelance platform to send malware-laced Excel attachments to about 80,000 of its users in […]

Why Advanced Duress Notification Matters in K-12 2026-09-02 at 12:00 By To be truly effective in K-12 schools with multiple rooms, common areas, hallways, athletic fields and surrounding grounds, wearable panic buttons need to be able to deliver several critical operations. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original […]

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another 2026-09-02 at 10:47 By Forescout Research – Vedere Labs said it used Anthropic’s Claude to port a working pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another, executing attacker-supplied ARM shellcode on live hardware. The […]

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials 2026-09-02 at 10:08 By Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox […]

Authorities Turn Sality’s P2P Network Against Itself, Cutting Off New Malware Payloads 2026-09-02 at 09:56 By The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation. The effort was undertaken on August 31, 2026, by authorities from […]