Critical NetScaler Vulnerability Exploited in Attacks 2026-09-10 at 15:20 By Ionut Arghire Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3. The post Critical NetScaler Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Critical NetScaler Vulnerability Exploited in Attacks Read More »
Organizations Warned of Cisco Secure FMC Exploitation 2026-09-10 at 13:06 By Eduard Kovacs Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026. The post Organizations Warned of Cisco Secure FMC Exploitation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Organizations Warned of Cisco Secure FMC Exploitation Read More »
New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender 2026-09-10 at 10:09 By Ionut Arghire The exploit provides full System privileges on Windows machines running the September 2026 patches. The post New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender Read More »
Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks 2026-09-10 at 09:33 By Ionut Arghire The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026. The post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks Read More »
Android’s September 2026 Updates Patch 180 Vulnerabilities 2026-09-09 at 19:30 By Ionut Arghire The security updates resolve critical flaws across Android’s Framework, System, and Kernel components. The post Android’s September 2026 Updates Patch 180 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Android’s September 2026 Updates Patch 180 Vulnerabilities Read More »
Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories 2026-09-09 at 19:22 By Ionut Arghire Major chipmakers announced patches for vulnerabilities recently discovered in their products. The post Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories Read More »
Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension 2026-09-09 at 17:33 By Ionut Arghire The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic. The post Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension Read More »
Expanding the Attack Surface: Analyzing Nightmare-Eclipse’s Latest PoCs 2026-09-09 at 15:37 By Serhii Melnyk and Timmy Lister In our previous blog, we explored a series of disclosures from the leak persona Nightmare-Eclipse that focused heavily on Microsoft’s ecosystem, including Windows Defender, Cloud Files, and core operating system functionality. This article is an excerpt from LevelBlue SpiderLabs […]
Expanding the Attack Surface: Analyzing Nightmare-Eclipse’s Latest PoCs Read More »
ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws 2026-09-09 at 13:49 By Ionut Arghire AVEVA and Rockwell Automation also released patches for vulnerabilities affecting industrial control system products. The post ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws Read More »
Chrome 153 Patches Seventh Zero-Day of 2026 2026-09-09 at 13:38 By Ionut Arghire The Chrome update includes 230 security fixes, and users are advised to update their browsers as soon as possible. The post Chrome 153 Patches Seventh Zero-Day of 2026 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chrome 153 Patches Seventh Zero-Day of 2026 Read More »
Ivanti Patches Critical Flaws Across Enterprise Security Products 2026-09-09 at 13:28 By Ionut Arghire Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches for authentication bypass flaws. The post Ivanti Patches Critical Flaws Across Enterprise Security Products appeared first on SecurityWeek. This article is an excerpt […]
Ivanti Patches Critical Flaws Across Enterprise Security Products Read More »
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days 2026-09-08 at 22:20 By Ionut Arghire The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities. The post Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days Read More »
Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day 2026-09-08 at 21:37 By Ionut Arghire Tracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code. The post Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day Read More »
MikroTik Patches Critical Flaws Chained to Hack Routers 2026-09-08 at 14:15 By Ionut Arghire Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices. The post MikroTik Patches Critical Flaws Chained to Hack Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
MikroTik Patches Critical Flaws Chained to Hack Routers Read More »
N-able Patches Critical Zero-Day in N-central 2026-09-08 at 13:37 By Ionut Arghire Administrators are advised to check their deployments for newly created user accounts they don’t recognize. The post N-able Patches Critical Zero-Day in N-central appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
N-able Patches Critical Zero-Day in N-central Read More »
Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits 2026-09-07 at 15:15 By Ionut Arghire The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges. The post Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits Read More »
Adobe Commerce Zero-Day Exploited to Backdoor Online Stores 2026-09-07 at 14:58 By Ionut Arghire The StyleSmuggler zero-day allows attackers to execute code and deploy a stealthy backdoor on Adobe Commerce and Magento stores. The post Adobe Commerce Zero-Day Exploited to Backdoor Online Stores appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Adobe Commerce Zero-Day Exploited to Backdoor Online Stores Read More »
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites 2026-09-05 at 16:00 By Ionut Arghire Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions. The post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWeek. This article […]
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites Read More »
Sangoma Switchvox Vulnerabilities Exploited in the Wild 2026-09-04 at 16:23 By Ionut Arghire Tracked as CVE-2026-9586, the unauthenticated SQL injection flaw can be exploited remotely for arbitrary code execution. The post Sangoma Switchvox Vulnerabilities Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Sangoma Switchvox Vulnerabilities Exploited in the Wild Read More »
12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover 2026-09-04 at 15:06 By Ionut Arghire Dubbed PostGREShell, CVE-2026-6471 turns low-level replication access into code execution, permanent superuser privileges and a persistent database backdoor. The post 12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover Read More »