Browsing Category
Networking
28 posts
Enterprise networking, data center fabrics, wireless and wired network operations, SASE, routing, switching, and the network infrastructure behind AI, cloud, security, and connected devices.
Ivanti Connect Secure Zero-Day Can Evade Integrity Checks: What Admins Should Do
Attackers chained an Ivanti Connect Secure auth bypass with two other flaws for root access, then erased evidence. Here is what to patch, hunt and rotate now.
FortiBleed Lockouts Hit FortiGate Firewalls: What Admins Should Check
The FBI says FortiBleed is still compromising FortiGate gateways and locking out admins. Here are the accounts, API keys and logs to check now.
Fake Google HTTPS Certificates Came From Hijacked Country Domains
Attackers hijacked .gh, .sl and .as registries to obtain valid HTTPS certificates. Here is how the attack worked and what domain owners should check.
Cloudflare Plans a Post-Quantum Certificate Authority: What Changes for HTTPS
Cloudflare plans to issue free classical and post-quantum certificates in 2027. Here is how Merkle Tree Certificates work and what website teams should prepare now.
Citrix NetScaler Zero-Days: Patch Now, Then Hunt for Web Shells
Citrix patched two actively exploited NetScaler zero-days that allow unauthenticated remote code execution. Here are the fixed builds, attack path, log hunts and response order.
Check Point Zero-Day Puts Firewall Management Servers on a Three-Day Patch Clock
Check Point patched an exploited management-server zero-day and confirmed Spark VPN attacks. Here are the fixed hotfix takes, hunt commands, and September 25 deadline.
Cisco Email Gateway Zero-Day Turns Mail Security Into Incident Triage
Cisco has patched CVE-2026-76461, an actively exploited Secure Email Gateway SQL injection flaw that can let unauthenticated attackers run commands as root. Because CISA added it to the KEV catalog with a September 17 deadline, admins should treat patching as the start of incident triage, not the end.
TP-Link’s Wi-Fi 8 Routers Make Reliability the Next Home-Network Pitch
TP-Link unveiled the Archer 8 Ultra router and Deco 8 Ultra mesh system at IFA 2026, putting early Wi-Fi 8 hardware on a preorder clock before the IEEE 802.11bn standard is final. The real upgrade pitch is not peak speed. It is fewer dead zones, smoother roaming, and more stable connections in crowded homes.
PaperCut Zero-Days Turn Print Servers Into Remote-Access Beachheads
PaperCut NG/MF customers face an actively exploited two-flaw chain that can turn exposed print-management servers into remote-access footholds. Admins should apply Emergency Patch Release 2, restrict web access, and check for pc-app.exe child processes, deleted logs, SimpleHelp, and AnyDesk activity.
Gunra Ransomware Puts VPN Gateways and Backups on the Same Incident List
A new FBI, CISA, NSA, Secret Service, DC3, and South Korean police advisory says Gunra ransomware affiliates are abusing exposed VPN and firewall paths, stealing cloud data, dumping credentials, and deleting backups before encryption. The useful response starts with edge-device patching, identity triage, immutable backups, and log review before recovery begins.