Vulnerabilities

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI 

exploited, Rejetto, Vulnerabilities, vulnerability /

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  2026-10-05 at 14:00 By Ionut Arghire CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  Read More »

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Citrix, exploited, Featured, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier 2026-10-05 at 08:14 By Eduard Kovacs Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched. The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first on SecurityWeek. This article is an […]

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier Read More »

Fortra Patches Critical Vulnerabilities in BoKS

BoKS, Fortra, patches, Vulnerabilities, vulnerability /

Fortra Patches Critical Vulnerabilities in BoKS 2026-10-03 at 14:34 By Ionut Arghire The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fortra Patches Critical Vulnerabilities in BoKS Read More »

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

China, exploited, Malware & Threats, Ransomware, SharePoint, Vulnerabilities, Warlock /

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks 2026-10-02 at 12:34 By Ionut Arghire The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks Read More »

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

exploited, Featured, FortiMail, Fortinet, Vulnerabilities, Zero-Day /

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action 2026-10-02 at 11:07 By Ionut Arghire CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system. The post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action Read More »

AI Has Changed Attack Speed, Not Security Fundamentals

AI, Artificial Intelligence, patching, Security Architecture, Security Infrastructure, Vulnerabilities /

AI Has Changed Attack Speed, Not Security Fundamentals 2026-10-01 at 16:15 By Joshua Goldfarb As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. The post AI Has Changed Attack Speed, Not Security Fundamentals appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

AI Has Changed Attack Speed, Not Security Fundamentals Read More »

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

exploited, Vulnerabilities, vulnerability, Zimbra /

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure 2026-10-01 at 15:55 By Ionut Arghire Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction. The post Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure Read More »

Zammad Zero-Days Exploited in AI-Powered DIVD Hack

AI, Artificial Intelligence, DIVD, exploited, Incident Response, Vulnerabilities, Zammad, Zero-Day /

Zammad Zero-Days Exploited in AI-Powered DIVD Hack 2026-10-01 at 13:42 By Ionut Arghire The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root. The post Zammad Zero-Days Exploited in AI-Powered DIVD Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Zammad Zero-Days Exploited in AI-Powered DIVD Hack Read More »

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability

Cisco, exploited, SD-WAN, Vulnerabilities, Zero-Day /

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability 2026-10-01 at 11:26 By Ionut Arghire The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges. The post Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability Read More »

Citrix NetScaler CVE-2026-88771: Observed Exploitation Artifacts and Hunt Indicators

Emerging Threats, News, Vulnerabilities /

Citrix NetScaler CVE-2026-88771: Observed Exploitation Artifacts and Hunt Indicators 2026-09-30 at 23:34 By Sean Shirley With contributions from James Rodriguez, Gus Staminatos, and Timmy Lister. This article is an excerpt from LevelBlue SpiderLabs Blog View Original Source

Citrix NetScaler CVE-2026-88771: Observed Exploitation Artifacts and Hunt Indicators Read More »

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

AI, analysis, Artificial Intelligence, Google, report, Vulnerabilities, vulnerability /

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery 2026-09-30 at 17:05 By Eduard Kovacs Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution. The post Google: AI Is Changing the Pace and Profile of Vulnerability Discovery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery Read More »

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability

Vulnerabilities, vulnerability, WatchGuard /

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability 2026-09-30 at 16:16 By Ionut Arghire WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS. The post WatchGuard Patches Critical Fireware OS Code Injection Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability Read More »

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks

Citrix, exploited, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks 2026-09-30 at 15:48 By Eduard Kovacs Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772. The post Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks Read More »

Chrome, Firefox Updates Patch Over 100 Vulnerabilities

Chrome, Firefox, patches, Vulnerabilities, vulnerability /

Chrome, Firefox Updates Patch Over 100 Vulnerabilities 2026-09-30 at 15:16 By Ionut Arghire Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox. The post Chrome, Firefox Updates Patch Over 100 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome, Firefox Updates Patch Over 100 Vulnerabilities Read More »

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL

OpenSSL, patches, Vulnerabilities, vulnerability, WolfSSL /

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL 2026-09-30 at 09:55 By Eduard Kovacs Roughly a dozen vulnerabilities have been patched in each of the open source cryptographic libraries.  The post High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL Read More »

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks

Amd, Arm, CPU, CPU attack, CPU vulnerability, Data leak, Endpoint Security, Intel, Spectre, Vulnerabilities /

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks 2026-09-29 at 20:00 By Eduard Kovacs Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel The post New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks […]

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks Read More »

Citrix NetScaler Zero-Day Exploited Globally

Emerging Threats, News, Vulnerabilities /

Citrix NetScaler Zero-Day Exploited Globally 2026-09-29 at 18:41 By Karl Sigler On Sept 27, Citrix released patches for two critical vulnerabilities being exploited in the wild. Based on current information, we confirm there has been no exposure or impact to LevelBlue or our clients. CISA has already added these vulnerabilities to the Known Exploited Vulnerabilities […]

Citrix NetScaler Zero-Day Exploited Globally Read More »

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ 

apple, exploited, Featured, iOS, macOS, Meta, Mobile & Wireless, Vulnerabilities, Zero-Day /

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  2026-09-29 at 09:18 By Eduard Kovacs Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950. The post Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  Read More »

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

cybercrime, Oracle PeopleSoft, ShinyHunters, Vulnerabilities, vulnerability /

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign 2026-09-28 at 13:56 By Ionut Arghire The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The post Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign Read More »

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability

alert, Kiteworks, Malware & Threats, Vulnerabilities, vulnerability /

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability 2026-09-28 at 12:44 By Ionut Arghire The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised. The post Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability Read More »

Scroll to Top