Vulnerabilities

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability

Cisco, exploited, SD-WAN, Vulnerabilities, Zero-Day /

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability 2026-10-01 at 11:26 By Ionut Arghire The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges. The post Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability Read More »

Citrix NetScaler CVE-2026-88771: Observed Exploitation Artifacts and Hunt Indicators

Emerging Threats, News, Vulnerabilities /

Citrix NetScaler CVE-2026-88771: Observed Exploitation Artifacts and Hunt Indicators 2026-09-30 at 23:34 By Sean Shirley With contributions from James Rodriguez, Gus Staminatos, and Timmy Lister. This article is an excerpt from LevelBlue SpiderLabs Blog View Original Source

Citrix NetScaler CVE-2026-88771: Observed Exploitation Artifacts and Hunt Indicators Read More »

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

AI, analysis, Artificial Intelligence, Google, report, Vulnerabilities, vulnerability /

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery 2026-09-30 at 17:05 By Eduard Kovacs Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution. The post Google: AI Is Changing the Pace and Profile of Vulnerability Discovery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery Read More »

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability

Vulnerabilities, vulnerability, WatchGuard /

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability 2026-09-30 at 16:16 By Ionut Arghire WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS. The post WatchGuard Patches Critical Fireware OS Code Injection Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability Read More »

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks

Citrix, exploited, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks 2026-09-30 at 15:48 By Eduard Kovacs Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772. The post Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks Read More »

Chrome, Firefox Updates Patch Over 100 Vulnerabilities

Chrome, Firefox, patches, Vulnerabilities, vulnerability /

Chrome, Firefox Updates Patch Over 100 Vulnerabilities 2026-09-30 at 15:16 By Ionut Arghire Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox. The post Chrome, Firefox Updates Patch Over 100 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome, Firefox Updates Patch Over 100 Vulnerabilities Read More »

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL

OpenSSL, patches, Vulnerabilities, vulnerability, WolfSSL /

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL 2026-09-30 at 09:55 By Eduard Kovacs Roughly a dozen vulnerabilities have been patched in each of the open source cryptographic libraries.  The post High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL Read More »

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks

Amd, Arm, CPU, CPU attack, CPU vulnerability, Data leak, Endpoint Security, Intel, Spectre, Vulnerabilities /

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks 2026-09-29 at 20:00 By Eduard Kovacs Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel The post New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks […]

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks Read More »

Citrix NetScaler Zero-Day Exploited Globally

Emerging Threats, News, Vulnerabilities /

Citrix NetScaler Zero-Day Exploited Globally 2026-09-29 at 18:41 By Karl Sigler On Sept 27, Citrix released patches for two critical vulnerabilities being exploited in the wild. Based on current information, we confirm there has been no exposure or impact to LevelBlue or our clients. CISA has already added these vulnerabilities to the Known Exploited Vulnerabilities […]

Citrix NetScaler Zero-Day Exploited Globally Read More »

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ 

apple, exploited, Featured, iOS, macOS, Meta, Mobile & Wireless, Vulnerabilities, Zero-Day /

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  2026-09-29 at 09:18 By Eduard Kovacs Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950. The post Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  Read More »

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

cybercrime, Oracle PeopleSoft, ShinyHunters, Vulnerabilities, vulnerability /

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign 2026-09-28 at 13:56 By Ionut Arghire The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The post Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign Read More »

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability

alert, Kiteworks, Malware & Threats, Vulnerabilities, vulnerability /

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability 2026-09-28 at 12:44 By Ionut Arghire The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised. The post Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability Read More »

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

Citrix, exploited, Featured, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug 2026-09-28 at 10:29 By Eduard Kovacs Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772. The post Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug Read More »

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

exploited, Featured, SharePoint, Vulnerabilities, vulnerability /

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks 2026-09-27 at 12:23 By Eduard Kovacs CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28. The post Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks Read More »

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration

AI, Artificial Intelligence, Vulnerabilities, vulnerability /

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration 2026-09-25 at 12:27 By Ionut Arghire Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks. The post ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration Read More »

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

email security, exploited, Featured, Roundcube, Vulnerabilities, vulnerability /

Roundcube Webmail Vulnerability in Attackers’ Crosshairs 2026-09-25 at 09:57 By Ionut Arghire Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Roundcube Webmail Vulnerability in Attackers’ Crosshairs Read More »

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted

SolarWinds, Vulnerabilities, vulnerability /

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted 2026-09-24 at 13:40 By Ionut Arghire The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication. The post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted Read More »

Critical WordPress Vulnerability Exploited Immediately After Disclosure

exploited, Featured, Vulnerabilities, vulnerability, WordPress /

Critical WordPress Vulnerability Exploited Immediately After Disclosure 2026-09-24 at 10:12 By Ionut Arghire Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code. The post Critical WordPress Vulnerability Exploited Immediately After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical WordPress Vulnerability Exploited Immediately After Disclosure Read More »

Enumerating Users and MFA via Microsoft’s Password Reset Portal

Vulnerabilities /

Enumerating Users and MFA via Microsoft’s Password Reset Portal 2026-09-23 at 20:13 By Matthew Coady Microsoft’s Self-Service Password Reset (SSPR) portal is a legitimate feature designed to let users recover their accounts without calling the helpdesk. As it turns out, it also tells you quite a lot about the accounts in a tenant — whether […]

Enumerating Users and MFA via Microsoft’s Password Reset Portal Read More »

Adobe Patches Critical Flaws in Connect, AEM Forms

Adobe, patch, Vulnerabilities, vulnerability /

Adobe Patches Critical Flaws in Connect, AEM Forms 2026-09-23 at 14:40 By Ionut Arghire The nine critical security defects could be exploited for arbitrary code execution and privilege escalation. The post Adobe Patches Critical Flaws in Connect, AEM Forms appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Patches Critical Flaws in Connect, AEM Forms Read More »

Scroll to Top