A closed TLS pilot exposes the certificate-chain work ahead. Map issuers and validators, then test ML-DSA certificates across real application paths outside production.
Enabled NX-API on affected Nexus switches exposes an unauthenticated request path; UCS 6300 fabric interconnects have a separate credential-dependent path.
A crafted TKEY query can stop vulnerable BIND DNS servers before access controls run. Check the running build and install the vendor's patched package.
watchTowr traced a new authentication bypass and Scan-to-Fax code-execution chain through an interim PaperCut build. Check the running version and past access to its web interface.
Unit 42 traced an exploited NetScaler command-injection chain through two appliance logs into a disguised PHP shell. Preserve logs and inspect the web-server configuration.
Cisco groups multiple License On-Prem flaws under four CVEs. Inventory the former SSM On-Prem too, migrate older branches, and verify the fixed release.
Microsoft urges faster fixes for critical on-premises systems. Check patch deployment logs, installed-update status and Baseline Security Mode configuration exceptions.
CISA lists CVE-2026-88779 as exploited. Record each ADC and Gateway's installed version and internet exposure; upgrade affected builds and verify the result.
CISA lists the on-prem flaw as exploited. Check Edge certificate authentication, web-interface reachability and the affected release train before upgrading.