Category: IT
-
Security Weekly #Nov 9, 2026: OpenSSH sshhole, Zyxel GS1900, Plex, Synology DSM and SonicWall
Weekly review #Nov 9, 2026: OpenSSH sshhole bypass on musl libc (CVE-2026-123158), pre-auth RCE in Zyxel GS1900 switches (CVE-2026-107441), active Plex2Shell attacks, C3RB3R ransomware on Synology DSM, SonicWall SonicOS KEV, and WordPress…
-
Security Weekly: Cisco SD-WAN, ASA Firewalls, WordPress 7.1.4, VMware ESX and GitLab
Turn of the month security: Cisco SD-WAN CVSS 10.0, ASA SSL VPN DoS, WordPress 7.1.4 update race condition RCE, VMware ESX audit bypass, and GitLab regex RCE incident.
-
Security Weekly: PHP2Shell, Arista VeloCloud zero-day, Cisco Expressway, Node2Shell and FortiSIEM
A turbulent week: PHP2Shell core RCE in PHP, VeloCloud SD-WAN zero-day SQLi, Cisco Expressway database root, Node2Shell Brotli overflow in Node.js, and FortiSIEM gRPC exploit.
-
Security Weekly #Oct 19, 2026: Cisco Secure Email Gateway, Palo Alto, BeyondTrust, Plex and Fortinet
A heavy perimeter security week: remote root in Cisco Secure Email Gateway, Palo Alto PAN-OS flaws, BeyondTrust zero-day, Plex2Shell cryptominer exploitation, and gateway flaws in Ivanti and Fortinet.
-
Security Weekly #Oct 12, 2026: Cisco NX-OS & Nexus switches, SonicWall SMA1000, Plex2Shell, Atlassian Data Center, WordPress 7.1.3 and ASUS
A heavy security week: triple unauthenticated root RCE in Cisco NX-OS and Nexus switches, CVSS 10.0 in SonicWall SMA1000, active Plex2Shell in-the-wild exploitation deploying XMRig cryptominers, Atlassian Data Center PoC, WordPress 7.1.3,…
-
Security Weekly #Oct 5, 2026: FortiMail zero-day, Cisco SD-WAN Manager, GlobalProtect and a third NetScaler flaw
A high-impact start to October: an in-the-wild zero-day file write flaw in FortiMail (CVE-2026-104286), unauthenticated API bypass in Cisco Catalyst SD-WAN Manager, client-side privilege escalation in Palo Alto GlobalProtect, and a third…
-
Security Weekly #Sep 28, 2026: Citrix NetScaler 0-day, Arista VeloCloud, WordPress Core, Microsoft SharePoint and MikroTik RouterOS
A volatile week across perimeter and core services: two actively exploited zero-day flaws in Citrix NetScaler ADC / Gateway, a CVSS 10.0 unauthenticated compromise in Arista VeloCloud SD-WAN Orchestrator, Path Traversal in…
-
Security Weekly #Sep 21, 2026: Cisco ISE, Cisco SEG, Orkes Conductor, Linux Kernel and SolarWinds ARM
A high-impact week for infrastructure security: an active zero-day in Cisco ISE (CVSS 10.0), unauthenticated root RCE in Cisco Secure Email Gateway (CVE-2026-76461), wide-scale scanning of Orkes Conductor, three Linux kernel flaws…
-
Security Weekly #Sep 14, 2026: Cisco FMC, Fortinet, GitLab and JFrog Artifactory
September brings no relief for infrastructure admins: an unauthenticated root bypass in Cisco FMC (CVE-2026-20079), a CVSS 10.0 arbitrary file read in GitLab (CVE-2026-85706), Fortinet’s monthly bulletin addressing hardcoded JWT keys in…
-
Security Weekly #Sep 07, 2026: MikroTik, VMware Workstation, Cisco Nexus and SonicWall
The week opens with an actively exploited flaw in MikroTik RouterOS SSH key handling (CVE-2026-67276 and CVE-2026-86060, a campaign running since September 2 confirmed by CERT Polska). Alongside it, Broadcom patched a…