Tag: vulnerabilities
443 articles
ViewState deserialization: Critical Must-Have Patch
When Sitecore patches were abused in an active ViewState deserialization attack, Google Cloud’s Mandiant stepped in to disrupt the campaign — a stark reminder to inventory Sitecore instances, apply patches immediately, and enable ViewState protections to prevent fast-moving compromises.
Cisco vulnerability: Stunning, Risky Threat to Grid
A $10 million reward for tips about alleged Russian operatives sheds light on a startling reality: a seven‑year‑old Cisco flaw — still unpatched in many legacy systems — is giving attackers a persistent backdoor into critical U.S. infrastructure. It’s a wake‑up call for operators and policymakers to finally prioritize upgrades, patching, and smarter defenses before the next outage or worse.
Android security bulletin: Urgent Must-Have Fixes
Google’s massive September Android bulletin patches 120 vulnerabilities — including two already exploited in the wild — so installing updates ASAP is no longer optional. Device makers and carriers must accelerate rollouts, or millions of phones will remain easy targets.
HexStrike AI: Must-Have Tool or Risky Threat?
Security researchers found HexStrike AI — an open‑source red‑teaming tool — being weaponized on underground forums to target newly disclosed Citrix NetScaler flaws within hours, shrinking defenders’ window to act. If you run Citrix ADC, treat disclosures like a ticking clock: patch immediately, apply mitigations, and tighten access.
Copeland refrigeration controllers: Stunning Risky Flaws
Imagine a stranger on the internet able to warm your supermarket freezers — Frostbyte10 exposes thousands of Copeland refrigeration controllers to attacks that could spoil food, ruin vaccines and cripple supply chains. Patches and mitigations exist, but grocers and cold‑chain operators need to act fast to isolate, update and secure vulnerable units before losses mount.
exposed Ollama servers: Risky Must-Have Security Fix
Cisco Talos found 1,100+ publicly exposed Ollama servers, creating easy paths for data theft, malicious model swaps, and other abuse. It’s a wake-up call to fix misconfigurations, enforce authentication, and make secure defaults the norm.
authentication bypass: Urgent Critical Emergency Flaw
Could a single click hand a stranger the keys to your vault? Click Studios has rushed a patch for a Passwordstate flaw that can create an emergency admin account — if you use Passwordstate, patch immediately, assume possible compromise, and check for unauthorized accounts.
state-sponsored actors: Exclusive Dangerous Threat Revealed
Recorded Future warns that when vulnerabilities are publicly disclosed, state-sponsored hackers are often first to turn them into real-world attacks. That stark reality means governments, companies and everyday users must speed up patching, rethink disclosure practices, and shore up defenses before the race to weaponize a flaw begins.
Salt Typhoon: Exclusive Risky Breach Exposes 600+ Orgs
A China-linked APT called Salt Typhoon has quietly breached over 600 organizations by exploiting Cisco, Ivanti, and Palo Alto flaws—targeting backbone routers and management systems to gain persistent, wide-reaching access. The campaign is a wake-up call to prioritize patching, inventory, and stronger segmentation and logging for every organization that relies on critical network infrastructure.
Citrix NetScaler Must-Have Patch to Stop Risky Exposure
Think you lock your doors at night? More than 13,000 Citrix NetScaler appliances remain exposed online despite patches — one flaw is already being actively exploited, so patch now or isolate and lock down access before attackers find you.
NetScaler appliances Must-Have Urgent Patch Alert
Citrix just released fixes for three critical NetScaler zero-days—one already exploited—so update and verify your appliances immediately. Then shore up defenses with segmentation, MFA and monitoring to reduce exposure while you patch.
CVE-2025-7775 Urgent: Critical NetScaler RCE Risk
Citrix has released fixes for three NetScaler vulnerabilities — including actively exploited CVE-2025-7775 — so if you run NetScaler ADC/Gateway, patch immediately and hunt for signs of compromise. These gateway flaws can allow remote code execution or disruption, so quick action will sharply reduce your risk.
Sni5Gect: Stunning Dangerous 5G Downgrade Risk
Researchers revealed Sni5Gect, an open-source toolkit that can silently force 5G phones onto older, less secure networks — and in some cases crash them — exposing users to interception, tracking and service loss. While the release aims to spur fixes, it also risks putting a powerful downgrade tool into the wrong hands unless vendors and regulators act fast.
NetScaler vulnerabilities: Critical Must-Fix Patches
Citrix has released urgent patches for three actively exploited NetScaler flaws, but fixing them often means juggling downtime, complex dependencies, and the worry that attackers may already be inside — update your appliances now, monitor logs, and apply recommended mitigations if you can’t patch immediately.
Commvault RCE: Critical Exploit – Patch Immediately
Could your backup system be a backdoor? Commvault patched four pre-auth vulnerabilities (notably CVE-2025-57788) in 11.36.60 that can be chained into remote code execution—update now or apply compensating controls to protect your backups and recovery.
Amazon Q Developer Must-Have Fix for Risky RCE
Amazon quietly patched serious flaws in its Q Developer VS Code extension that could let attackers inject prompts to steal local secrets like API keys or even run remote code. It’s a wake-up call to treat AI-powered IDE tools as high‑risk and lock down privileges.
end-of-life Cisco Risky Nightmare: Must-Have Fix
The FBI says Russian-linked hackers used a seven‑year‑old, unpatched Cisco flaw to steal router and switch configurations from thousands of systems—giving attackers maps, credentials and direct access to critical infrastructure. If you’re still running legacy kit, now’s the time to inventory, isolate, and prioritize replacements or strict compensating controls.
unauthenticated remote code execution: Critical Must-Have Patch
Commvault has released urgent patches after researchers published working exploits for two unauthenticated remote‑code‑execution chains—if you use Commvault, update now and audit your systems. This wake‑up call shows how critical backup infrastructure is and why quick patching, stronger access controls, and offline or immutable backups are essential to avoid catastrophic breaches.
SAP NetWeaver Critical Threat: Must-Have Patch Urgency
A public, weaponized exploit chaining two critical SAP NetWeaver flaws lets attackers bypass authentication and gain remote code execution. If you haven’t patched every NetWeaver instance, prioritize fixes, network segmentation and monitoring now to avoid data theft and disruption.
NFC fraud: Must-Have Defenses Against Costly Attacks
Security rarely breaks in a single blast — it seeps away. This week’s roundup shows how NFC fraud, N‑able exploits, and malicious Docker images quietly erode trust and widen blast radii when small oversights go unpatched.
AI-generated code: Risky Threats & Must-Have Fixes
A new Checkmarx study reveals a surprising and worrying trend: AI-generated code now makes up over 60% of some codebases—and much of it contains known vulnerabilities—so the same tools that speed development can also widen your attack surface. Treat AI suggestions like draft work: add automated scans, clear guardrails, and reviewer sign-off to keep convenience from turning into a systemic security risk.
N‑able N‑central Critical Risk: Urgent Must-Fix Flaws
Heads-up: CISA has added two N‑able N‑central flaws to its KEV catalog after evidence of active exploitation, so MSPs and customers should urgently locate, patch or isolate affected RMM instances and tighten admin controls. Because a compromised RMM can give attackers broad access, demand proof of remediation and enforce strong segmentation, MFA, and monitoring now.
high severity protocol vulnerabilities: Must-Have Patch
Matrix.org disclosed two high-severity protocol flaws that require breaking changes across servers and clients. Federated homeserver operators must urgently coordinate upgrades to avoid exploitation, while single-instance users can roll updates more deliberately.
Kerberos zero-day: Critical Emergency Fix You Must Apply
Microsoft’s August 2025 Patch Tuesday includes a publicly known Kerberos zero‑day—apply the update and prioritize domain controllers now to stop attackers from forging tickets or escalating privileges. Also tighten MFA and monitoring while patches roll out to reduce your exposure.