Friday, November 6, 2026

Vulnerability

Hackers Exploit Zyxel GS1900 Zero-Day Vulnerability to Compromise Nearly 1,000 Network Switches

Attackers used a pre-authentication remote code execution exploit against Zyxel GS1900 switches. They compromised nearly 1,000 devices before Zyxel patched the flaw. Binarly researchers found that the exploit abused...

Debian and Ubuntu Linux APT Vulnerability Allows Attackers to Execute Malicious Code With Root Privileges

A vulnerability in the APT package manager lets attackers intercept communications between Linux systems and package repositories, install malicious packages, and execute code with...

Barracuda Email Security Gateway Flaws Expose Devices to Potential Root-Level Compromise

Barracuda has released security patches for two vulnerabilities that could be exploited to bypass authorization controls and gain root access to affected Email Security...

Critical SolarWinds Dameware Vulnerability Enables Attackers to Take Control of Remote Systems

SolarWinds has announced a critical command injection vulnerability in its Dameware software that could let authenticated attackers remotely compromise controlled hosts. This vulnerability, identified...

Ubuntu Releases Security Fixes for Critical Linux Kernel Vulnerability Allowing Remote Code Execution

Ubuntu has made fixes available for CVE-2026-98432, a critical Linux kernel vulnerability allowing remote code execution through IPv4 TCP connection handling. The flaw carries...

Hackers Exploit Critical Magento StyleSmuggler Vulnerability to Deploy PSK Agent RAT and Hijack Servers

Attackers exploited the critical StyleSmuggler vulnerability in Magento and Adobe Commerce to deploy PSK Agent, a remote access trojan enabling command execution, traffic proxying,...

5-Year-Old Linux Kernel Vulnerability Allows Unprivileged Attackers to Gain Root Access

A Linux kernel flaw that sat unnoticed for nearly five years can let an unprivileged local user take full root control of a system....

CISA Confirms Active Exploitation of GitLab Vulnerability CVE-2026-97229

The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that CVE-2026-97229, a critical vulnerability affecting both GitLab Community Edition and Enterprise Edition, is actively...

Critical Linux Kernel Vulnerability Lets Remote Attackers Crash Ubuntu Systems

A critical vulnerability in the Linux kernel, identified as CVE-2026-98432, threatens Ubuntu systems through a networking memory flaw that could cause crashes and service...

Chinese Hackers Exploit VMware ESXi Zero-Day to Target Law Firms in Cyber Espionage Attacks

Chinese state-linked hackers have exploited a zero-day vulnerability in VMware ESXi during espionage operations aimed at U.S. law firms, according to CrowdStrike's latest assessment...

CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to its Known Exploited Vulnerabilities...