Zyxel GS1900 switches face exploited CGI command-execution flaw
CISA lists a LAN-reachable GS1900 CGI overflow as exploited. Match switch model and firmware to Zyxel’s fixes, then restrict management access.
Read article →network
Network activity, protocols, infrastructure, and detection.
CISA Lists Exploited F5 BIG-IP APM Flaw Allowing Code Execution
The exposed configuration is an APM OAuth Authorization Server virtual server. Request F5’s interim iRule for triage, then install the applicable final fix.
Read article →
MikroTik RouterOS Rekey Error Exposes Routers With Open SSH
CISA lists a RouterOS SSH rekey flaw as exploited. It lets unauthenticated clients reach a command path and can chain with a second flaw; update and restrict SSH.
Read article →
Fortinet FortiMail Attackers Write Files Through Its Web Interface
CISA lists an exploited FortiMail arbitrary-file-write flaw. Fortinet urges operators to disable IBE or restrict management access while branch upgrades are forthcoming.
Read article →
ViewSonic ViewBoard Flaws Expose Screens and Open a Code Path
Three unauthenticated vCast endpoints expose screen images, APK delivery and service input on shared networks. Isolate ViewBoards and check who can reach them.
Read article →
Cisco SD-WAN Manager Flaw Gives Attackers Admin Access
An exploited URI-encoding bypass reaches the management API as admin. Check Cisco's service-proxy and server logs, restrict exposure, and install a fixed release.
Read article →
GTIG Counts 141 Exploited Flaws as CVE Disclosures Double
GTIG recorded 141 disclosed and exploited vulnerabilities through August 2026. Prioritize reachable edge systems and verify the access conditions on affected AI gateways.
Read article →
NetScaler Intruders Hide Web Shells Behind Icons and Tunnel Into Networks
Mandiant traces exploited NetScaler packet-engine crashes to disguised PHP shells and an internal proxy. Hunt the config edits and appliance egress, then patch both flaws.
Read article →
Check Point Management Servers Face Script-Upload Attacks
Check Point reports customer attacks through an unauthenticated management-server flaw. Match Jumbo Hotfix takes, restrict TCP/19009 and inspect CPM logs.
Read article →
Attackers Exploit Two NetScaler Flaws That Permit Code Execution
CISA lists two exploited NetScaler flaws. Match ADC and Gateway builds to their release branches, then preserve evidence on appliances suspected of compromise.
Read article →
Check Point VPN Flaws Let Remote Attackers Run Code on Gateways and Servers
Two certificate-processing flaws reach gateways and management servers. Fixed takes and LivePatch output give operators a direct protection check.
Read article →
Cisco Firewall Manager Breaches Led to Credential Theft and Ransomware
Attackers used Cisco Secure FMC flaws to reach root, steal credentials, tunnel into networks, deploy Cyclops Blink, and encrypt selected endpoints with Qilin.
Read article →
Attackers Exploit Fortinet Flaw That Lets Crafted Packets Run Code
CISA confirmed exploitation of CVE-2025-25249 across FortiOS, FortiSwitchManager and FortiSASE, with federal remediation due September 12.
Read article →Showing 27–39 of 68