Vulnerabilities

Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws

Cisco, patches, SonicWall, Vulnerabilities, vulnerability, WatchGuard /

Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws 2026-11-05 at 14:33 By Ionut Arghire Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws. The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws Read More »

Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day

exploited, Switch, Vulnerabilities, Zero-Day, Zyxel /

Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day 2026-11-05 at 12:56 By Ionut Arghire Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests. The post Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day appeared first on SecurityWeek. This article is […]

Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day Read More »

Barracuda ESG Authentication Bypass Flaw Opens Path to Root

Barracuda, email security, ESG, Vulnerabilities, vulnerability /

Barracuda ESG Authentication Bypass Flaw Opens Path to Root 2026-11-04 at 16:24 By Eduard Kovacs An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances. The post Barracuda ESG Authentication Bypass Flaw Opens Path to Root appeared first on SecurityWeek. This article is an excerpt […]

Barracuda ESG Authentication Bypass Flaw Opens Path to Root Read More »

Is Your Refrigerator Running? Yes, It’s Running an Outdated OS: What the Supermarket Refrigeration Attacks Reveal About Embedded Security

Emerging Threats, Tips & Tricks, Vulnerabilities /

Is Your Refrigerator Running? Yes, It’s Running an Outdated OS: What the Supermarket Refrigeration Attacks Reveal About Embedded Security 2026-11-04 at 14:30 By Nolen Johnson Overnight on November 2, freezers in supermarkets across Sweden, Belgium, Luxembourg and Ireland climbed to around 50°C, and stores awoke to spoiled stock. This is the second wave within a month, […]

Is Your Refrigerator Running? Yes, It’s Running an Outdated OS: What the Supermarket Refrigeration Attacks Reveal About Embedded Security Read More »

Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

Chrome, Vulnerabilities, vulnerability /

Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical 2026-11-04 at 12:38 By Ionut Arghire The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues. The post Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical Read More »

Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million

AI, Artificial Intelligence, bug bounty program, Featured, Meta, Muse, Vulnerabilities, vulnerability /

Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million 2026-11-04 at 10:27 By Eduard Kovacs A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff. The post Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million appeared […]

Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million Read More »

Android’s November 2026 Updates Patch Over 200 Vulnerabilities

Android, Mobile & Wireless, mobile security, patches, Vulnerabilities, vulnerability /

Android’s November 2026 Updates Patch Over 200 Vulnerabilities 2026-11-03 at 14:21 By Ionut Arghire The most severe is a critical flaw in Framework leading to remote code execution without user interaction. The post Android’s November 2026 Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Android’s November 2026 Updates Patch Over 200 Vulnerabilities Read More »

Critical Node-RED Flaw Exploited in Attacks

exploited, ICS, ICS/OT, Node-RED, Siemens, Vulnerabilities, vulnerability /

Critical Node-RED Flaw Exploited in Attacks 2026-11-03 at 14:10 By Ionut Arghire Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells. The post Critical Node-RED Flaw Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Node-RED Flaw Exploited in Attacks Read More »

Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward

bug bounty program, cloud security, Google Cloud, Vulnerabilities /

Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward 2026-11-02 at 15:25 By Ionut Arghire The top payout is for high-impact architectural research demonstrating full administrative control. The post Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward Read More »

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

exploited, Featured, Ivanti, Vulnerabilities, Zero-Day /

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain 2026-11-02 at 09:57 By Eduard Kovacs CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. The post Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain appeared first on SecurityWeek. This […]

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain Read More »

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

exploited, Malware & Threats, Palo Alto Networks, PHP, PHP2Shell, Vulnerabilities, vulnerability, WordPress /

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress 2026-10-30 at 17:09 By Ionut Arghire Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek. This article […]

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress Read More »

Fresh WordPress Vulnerability in Attackers’ Crosshairs

exploited, Vulnerabilities, vulnerability, WordPress /

Fresh WordPress Vulnerability in Attackers’ Crosshairs 2026-10-30 at 14:04 By Ionut Arghire Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution. The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fresh WordPress Vulnerability in Attackers’ Crosshairs Read More »

Drupal Commerce Core Vulnerability Exploited Against Online Stores 

Drupal, exploited, Vulnerabilities, Zero-Day /

Drupal Commerce Core Vulnerability Exploited Against Online Stores  2026-10-30 at 13:07 By Eduard Kovacs Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability Exploited Against Online Stores  appeared first on SecurityWeek. This article is an excerpt […]

Drupal Commerce Core Vulnerability Exploited Against Online Stores  Read More »

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

Alpine Linux, CISA KEV, exploited, GitLab, Vulnerabilities /

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux 2026-10-30 at 11:32 By Ionut Arghire Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux Read More »

TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines

TeamViewer, Vulnerabilities, vulnerability /

TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines 2026-10-30 at 10:44 By Ionut Arghire An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines appeared first on SecurityWeek. This article is an […]

TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines Read More »

Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities

Adobe, Juniper Networks, patches, Veeam, Vulnerabilities, vulnerability /

Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities 2026-10-29 at 15:42 By Ionut Arghire The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation. The post Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities Read More »

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network

China, China APT, Cisco, exploited, Malware & Threats, Nation-State, SD-WAN, Silent Train, Volt Typhoon, Vulnerabilities, Zero-Day /

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network 2026-10-29 at 12:29 By Eduard Kovacs Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed. The post Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network appeared first on SecurityWeek. This article is an […]

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network Read More »

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Cisco, exploited, Vulnerabilities, vulnerability /

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August 2026-10-29 at 11:47 By Eduard Kovacs Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote […]

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August Read More »

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

ESXi, exploited, Featured, VMWare, VMware ESXi, Vulnerabilities, vulnerability, Zero-Day /

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day 2026-10-29 at 10:01 By Ionut Arghire CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged. The post Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day Read More »

Chrome and Firefox Updates Patch Over 200 Vulnerabilities

Chrome, Firefox, patches, Vulnerabilities, vulnerability /

Chrome and Firefox Updates Patch Over 200 Vulnerabilities 2026-10-28 at 15:39 By Ionut Arghire The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome and Firefox Updates Patch Over 200 Vulnerabilities Read More »

Scroll to Top