Tag: vulnerability management
685 articles
MarkLogic Flaws Empower Delegated Managers to Gain Admin Control
Progress is urging users to upgrade MarkLogic Server ASAP, as a recent spate of vulnerabilities - including 31 flaws disclosed just last month, five of which are critical - could leave delegated managers with admin control and users stripped of previous privileges. A second round of security patches has been released in response, with fixes available since September 10.
Flock Assumes CVE Issuance Role Amid Trust Concerns
By becoming a CVE Numbering Authority, Flock can now swiftly respond to vulnerability reports, providing customers with a single, trusted source for security information and eliminating confusion from duplicate or conflicting entries. This move enables Flock to enhance its security offerings and strengthen trust with its customers.
VMware Unveils HyperArmor to Streamline Patch Management
VMware is giving customers some much-needed breathing room with its new monthly update schedule, made possible by AI-powered defect detection that uncovered a surge of issues. This change aims to balance speedy patching with the time customers need to test and validate fixes.
Atlassian Flaw Exploited in Wild Amid Security Software Scrutiny
Hackers sprang into action just two hours after technical details were released, exploiting a critical Atlassian flaw that puts multiple Data Center products at risk. This rapid attack highlights the shrinking window for defence in today's threat environment.
GitLab Patches Code Execution Flaw in CI/CD Compiler
GitLab has patched a critical code-execution flaw in its CI/CD compiler that allowed remote attackers to run arbitrary code on targeted instances. The vulnerability, tracked as CVE-2026-97229, was caused by an integer overflow weakness in the CI/CD Regular Expression Compiler.
SonicWall SMA 1000 Flaw Exploited in 135 Attempts Post-Patch
A critical vulnerability in SonicWall's SMA 1000 appliances, known as CVE-2026-102255, has been exploited in 135 attempts since a patch was released, allowing attackers to secretly tap into internal systems and perform unauthorized operations. This highly severe flaw, rated 10.0 on the CVSS scale, enables pre-authenticated server-side request forgery attacks.
Anthropic Unveils AI-Powered Vulnerability Scanner for Open-Source Projects
Anthropic is now offering a free, AI-powered vulnerability scanner to help open-source maintainers identify and fix security issues, having already uncovered over 29,000 potential vulnerabilities in critical software projects. This innovative tool uses advanced models like Claude Mythos to generate security reports quickly and efficiently.
Citrix Patches Flaw That Enables RCE in SAML Deployments
Citrix has patched a critical vulnerability, CVE-2026-107406, with a near-perfect score of 9.5, that could allow devastating remote code execution or denial-of-service attacks in SAML deployments. The flaw can be triggered under specific configuration conditions when NetScaler instances are set up as a SAML identity provider or service provider.
Microsoft Warns of Security Update Cutoff for Outdated Windows Devices
Don't wait until it's too late: if you're running an outdated version of Windows, you'll lose access to crucial security updates after May 17 and June 19, 2027, when key certificates expire. Upgrade to a supported version now to stay protected.
Citrix Warns of Immediate Patching Need for NetScaler RCE Flaw
Citrix is sounding the alarm on a critical vulnerability, CVE-2026-107406, that can lead to remote code execution or a denial-of-service state in NetScaler devices - and it's urging admins to patch immediately.
Anthropic Launches Cybersecurity Program to Fortify Critical Infrastructure
Anthropic is stepping up to support defenders of critical infrastructure and open-source software, who are rich in experience but often low on resources, by launching a long-term cybersecurity program to identify and fix vulnerabilities. By combining its Claude models, engineering expertise, and threat research with partner cybersecurity firms, Anthropic aims to help safeguard critical infrastructure from exploitation.
Cisco Discloses Critical Flaws in Nexus Switches
Cisco has uncovered five critical vulnerabilities in its Nexus switches that could let hackers run malicious code with root access or bring down entire networks, causing major disruptions. This security threat affects Nexus 3000 and 9000 Series switches, putting your network at risk of remote code execution and denial-of-service attacks.
FBI Breach Exposes Third-Party Risk
A recent FBI breach was caused by a security failure at a third-party organization, Accenture, after a contractor neglected to apply a crucial security patch, exposing sensitive employee information. This incident highlights the significant risks associated with relying on outside vendors and the importance of stringent security measures.
Agentic Pentesting Targets Validation Gap in Cyber Defenses
The threat landscape is evolving at an alarming rate: a 49.5% surge in CVEs reported in the first half of 2026, with exploits now emerging in as little as eight hours. This means traditional cyber defense validation methods are being outpaced by the speed and volume of attacks.
SonicWall Disrupts SSRF Flaw in SMA1000 Gateways
Don't let your SonicWall SMA1000 gateways become an open door for hackers - a critical SSRF flaw, CVE-2026-102255, has been discovered, allowing attackers to make internal requests without authorization, and hotfixes are available to patch this vulnerability. Over 400 Internet-exposed appliances are currently at risk, making immediate action crucial.
Anthropic Expands AI Access for Cyber Teams After Finding 129,000 Flaws
Anthropic is supercharging cyber teams with expanded access to its AI models, following a staggering discovery of 129,000 flaws - with over 33,000 rated critical or high-severity. The company's Cyber Verification Program now offers tiered access to advanced models like Claude Opus 5.5, empowering teams to tackle vulnerabilities head-on.
Anthropic Overhauls Cyber Verification Program
Anthropic is shaking up its approach to cybersecurity with a major overhaul of its Cyber Verification Program, combining it with Project Glasswing to supercharge security efforts. The move follows a successful six-month trial that helped partners uncover over 129,000 verified software vulnerabilities.
MSPs Warned to Secure RMM Software Against Rising Attack Threats
MSPs, beware: with great power comes great vulnerability - RMM software can put thousands of customer devices at risk if not properly secured, and the stats are alarming, with nearly 1,500 servers recently exposed online. One compromised account or server can have a devastating blast radius, making it crucial to act now to protect your business.
Red Hat's Lightwell Project Tackles 400 Open-Source Flaws
Red Hat's Lightwell project has made a significant impact, remediating over 400 novel vulnerabilities in key Java libraries since its launch in June. This crucial initiative helps protect against the rapidly evolving threat landscape, where AI-powered tools can quickly exploit old code.
Atlassian Flaw Exposes File Data Across Multiple Products
A critical security flaw, rated 9.3 out of 10, has been discovered in multiple Atlassian products, allowing unauthenticated attackers to access sensitive files. This vulnerability, known as CVE-2026-21589, poses a significant risk to self-hosted Data Center products if exploited.
Citrix NetScaler Exploited in Active Attacks Amid New 0-Day Reports
Citrix NetScaler is under active attack, with hackers exploiting a newly discovered vulnerability that can cause denial of service with just a single specially crafted request. The flaw, known as CVE-2026-88779, affects certain NetScaler deployments configured for single sign-on authentication.
Hackers Actively Scan Rejetto HFS Servers for Critical RCE Flaw
Hackers are on the hunt for Rejetto HFS servers with a critical flaw that lets them forge sessions, take over accounts, and execute remote code - and it's crucial to update to version 3.2.1 ASAP to avoid falling victim. This vulnerability, known as CVE-2026-61500, was patched in July, but attackers are actively scanning for affected servers.
Microsoft Exchange Flaw Exposes Mailboxes to Authenticated Attackers
A newly discovered flaw in Microsoft Exchange Server could put your mailboxes at risk, allowing authenticated attackers to elevate their privileges and gain unauthorized access across your network. Microsoft has urgently released a security update to patch this high-severity vulnerability, rated 8.8 on the CVSS scale.
Dell Flaw Exposes Root Privileges to Hackers
Dell's System Update tool has a critical flaw that could let hackers gain total control of your system - and all it takes is remote access to get started. This vulnerability, tracked as CVE-2026-86360, is a serious threat that could allow attackers to execute code with root privileges.