Browsing Tag
Vulnerability Management
53 posts
Prioritizing, patching, and reducing exposure to software vulnerabilities.
CISA Gives Nextcloud Collabora Admins Until Oct. 26 to Patch an Exploited RCE
CISA added an exploited Collabora Built-in CODE flaw to KEV. Check the affected Nextcloud app, patch it, and hunt for web shells before October 26.
GitLab CVSS 10 RCE Spans 12 Years of Releases: Patch and Hunt Now
CVE-2026-110264 lets unauthenticated attackers run code on self-managed GitLab servers. Check fixed versions, upgrade traps and the evidence defenders should preserve.
PHP2Shell Is Patched, but a Third PHP RCE Edge Case Remains
PHP’s emergency updates fix the two critical PHP2Shell flaws, but CVE-2026-115560 still needs a temporary session upload setting change. Here is how to verify every web runtime.
Plex2Shell Is Being Exploited: How to Check and Clean Your Plex Server
Plex2Shell is now being used to install miners and proxy software. Check your Plex version, hunt the early indicators, and know when to rebuild.
French Supermarket Fridge Hacks: Why a Factory Reset Is Not Enough
France’s refrigeration-controller attacks hit hundreds of supermarkets. Here is how to contain Danfoss and XWEB systems without inviting reinfection.
Ivanti Connect Secure Zero-Day Can Evade Integrity Checks: What Admins Should Do
Attackers chained an Ivanti Connect Secure auth bypass with two other flaws for root access, then erased evidence. Here is what to patch, hunt and rotate now.
Windows October Update Fixes Zero-Day but Can Break Remote Desktop
Microsoft’s October 2026 Windows update fixes an exploited Shell bypass but can break Remote Desktop for some non-admin users. Here’s how to prioritize rollout.
Citrix NetScaler Zero-Days: Patch Now, Then Hunt for Web Shells
Citrix patched two actively exploited NetScaler zero-days that allow unauthenticated remote code execution. Here are the fixed builds, attack path, log hunts and response order.
Check Point Zero-Day Puts Firewall Management Servers on a Three-Day Patch Clock
Check Point patched an exploited management-server zero-day and confirmed Spark VPN attacks. Here are the fixed hotfix takes, hunt commands, and September 25 deadline.
Palo Alto Launches Always-On AI Pentesting With Mythos 5 and GPT-5.6-Cyber
Palo Alto Networks' Unit 42 now uses Mythos 5, GPT-5.6-Cyber, and open models for continuous attack-path testing. Its own results show why buyers should judge the harness, controls, and remediation workflow, not just the models.