Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
WatchGuard FireWare OS: Pre-Auth RCE in Endpoint Service
On September 9, 2026, the ZDI-26-632 advisory disclosed a critical vulnerability in WatchGuard FireWare OS. The flaw resides in the En…
Oracle Outside In: RCE via WPS File, Patch Released September 9, 2026
ZDI-26-638 documents a remote code execution vulnerability in the WPS parser of Oracle Outside In Technology 8.5.8. The CVSS score is…
Flowise: Critical RCE in CSV Agent, Component Removed from Codebase
CVE-2026-70477 with CVSS 9.8 in Flowise's CSV_Agent component: unauthenticated prompt injection leads to remote code execution. The ve…
FortiSandbox Command Injection Grants Root RCE: Why the CVSS 6.7 Underrates the Risk
Trend Micro's Zero Day Initiative published advisory ZDI-26-645 detailing a command injection flaw in Fortinet FortiSandbox. The vulne…
Cisco Confirms CVE-2026-20079 in FMC Actively Exploited by Sandworm and Qilin
Cisco confirms active exploitation of CVE-2026-20079 in Secure Firewall Management Center. Two distinct threat clusters — APT Sandworm…
BlueMoon: The Shared Exploit Kit Accelerating the Race for Chrome Vulnerabilities
BlueMoon enabled four cyber-espionage groups to exploit the same Chrome zero-day through a roughly four-week patch-gap window, marking…
AMD, Arm, and Nvidia: September 9 Patches for GPU and AI Inference Vulnerabilities
On September 9, 2026, three chipmakers released coordinated security advisories: flawed GPU drivers and bugs in Nvidia's Triton Infere…
LiteLLM: 9.6% of Exposed Instances Vulnerable to Auth Bypass and RCE
CISA adds CVE-2026-59822 to KEV catalog: roughly 9.6% of public LiteLLM instances accept default master key or no authentication, with…
Hidden Pay-Per-Install Market: The CL-CRI-1171 Operation That Evaded SOCs for Two Years
Unit 42 has documented a pay-per-install marketplace operational since at least 2024. Tracked as CL-CRI-1171, the cluster distributed…
BAS at Machine Speed: The Structural Collapse of Disclosure-to-Exploit
The window from disclosure to weaponized exploit has collapsed to roughly 10 hours. Defensive controls stop 69% of attacks, but only 1…
CVE-2026-50696: ZDI and Microsoft Split on Windows IKEv2 Severity
ZDI rates it RCE SYSTEM; Microsoft calls it DoS Important. The CVE-2026-50696 discrepancy upends patch prioritization for security tea…
Record-Breaking Patch Tuesday: Microsoft Fixes 974 CVEs, Two Zero-Days Under Active Attack
Microsoft addressed a historic 974 vulnerabilities in September 2026. Two actively exploited zero-days enabling local privilege escala…