Tag
News and blog posts tagged Network Security on AppSecNews.
News Vulnerabilities & Zero-Days
Palo Alto Networks has patched CVE-2026-0322, a PAN-OS management interface flaw that lets an authenticated attacker run code as root, after observing very limited exploitation. CISA gave US federal agencies until 17 October 2026 to fix it.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
NGINX released 1.30.6 and 1.31.7 on 14 October 2026 to fix five vulnerabilities, including heap overflows and a use-after-free that F5 says could allow code execution under specific configurations, and a TLS flaw that may skip client certificate checks.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
Ivanti patched CVE-2026-104935 in Connect Secure on 13 October 2026 after limited exploitation in the wild, and CISA gave US federal agencies until 16 October to fix it. Volexity says an attacker chained it with a third, still unpatched flaw to run commands as root.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
Cisco says attackers are exploiting CVE-2026-76519, a 9.8-rated flaw that lets an unauthenticated sender write files to a Secure Email Gateway with a crafted attachment, which can lead to commands running as root. There is no workaround.
Jaydeep Bhatt
News Cyber Attacks
Attackers forced fridges and freezers into defrost at hundreds of French supermarkets overnight from 11 to 12 October 2026. France's CERT-FR says it is aware of numerous compromises of Danfoss AK-SM and AK-SC controllers and tells operators to disconnect them or filter access.
Jaydeep Bhatt
News Cyber Attacks
South Korean authorities have launched an investigation into a series of cyberattacks that exposed customer information at multiple financial firms. President Lee Jae Myung said details have emerged suggesting possible AI use in some hacking incidents, but authorities have not disclosed the specific AI tools involved or established the full scope of AI's role.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
Citrix has released emergency security updates for a high-severity NetScaler vulnerability, CVE-2026-88779, after confirming that attackers are exploiting the flaw in targeted attacks. The vulnerability can cause denial-of-service on affected NetScaler deployments using SAML authentication.
Jaydeep Bhatt