-
Octopus Deploy has announced a high-severity vulnerability in Octopus Server that could allow authenticated users with project or environment editing permissions to execute arbitrary code within the Octopus Server process. Tracked as CVE-2026-101169, t…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A teen hacker found an authentication flaw in Microsoft’s Titan analytics service, where metadata indicated an estimated 17.3…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
wolfSSL has released version 5.9.4, which addresses 11 security vulnerabilities related to TLS and DTLS handshakes, X.509 certificate validation, certificate revocation, OCSP stapling, session resumption, and memory safety. This release is particularly…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
WatchGuard has announced the discovery of three high-impact vulnerabilities in its wireless access point platform. Two of these critical issues allow unauthenticated network attackers to gain API access and execute arbitrary operating-system commands. …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A cluster of 31 Russian-language Chrome extensions, marketed as “VPN for X” tools, has been discovered using a shared codebase to redirect browser traffic through remotely controlled proxy infrastructure. This ongoing campaign, revealed on September 19…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The CERT Coordination Center (CERT/CC) has revealed a chain of three vulnerabilities in ViewSonic’s vCast software that could enable unauthenticated attackers on a shared network to steal displayed screen content, install malicious Android applications…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Citrix has released emergency security updates for NetScaler ADC and NetScaler Gateway after confirming active exploitation of two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772. Both bugs have a CVSS v4.0 score of 9.5 and can ena…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A vulnerability in the Linux kernel’s AF_ALG cryptographic interface, which has existed for 14 years, can let an unprivileged local attacker gain root access and escape a Docker container by exploiting a race condition in concurrent socket writes. This…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
