Default-permissions LPE on Acronis cPanel/Plesk backup agents under limited targeted exploitation. Same Saturday clock....
CVSS 10 ISE/ISE-PIC API auth bypass can land root. Active exploitation; federal due date Saturday September 19....
Thursday brief: N-able N-central CVSS 10, JFrog Artifactory admin chain, Citrix NetScaler bypass, Google Pixel KEV due September 19....
CISA added a Pixel cellular-modem improper-authorization bug on September 16. Federal due September 19 — verify MDM security patch levels....
Critical NetScaler ADC/Gateway auth bypass patched August 19 is exploited since ~September 3 and now on CISA KEV. Emergency edge…
Wiz saw attackers chain Artifactory flaws into admin in under five minutes, then drop Groovy plugins and a Rust C2.…
CVSS 10 pre-auth RCE on on-prem N-central, exploited before disclosure. Patch Hotfix 4, then hunt stranger admins — especially .invalid…
CISA confirmed ransomware gangs are exploiting the critical vCenter Syslog RCE patched in July. Patch fixed trains and hunt the…
CVSS 10 Magento template RCE exploited before the hotfix and still mass-scanned. Apply VULN-39341, hunt backdoors, rotate keys....
Unauthenticated CAPWAP overflow abused to deploy PivotC2 on FortiGate. Upgrade FortiOS and rotate harvested secrets....
CVSS 10 FMC authentication bypass confirmed exploited by nation-state and ransomware clusters. Hotfix now; TAC if IoCs hit....
Wednesday brief: vCenter ransomware, Magento StyleSmuggler, FortiGate PivotC2, and Cisco FMC root bypass....
Cisco email gateway root RCE due Wednesday, Sogou one-click to GRAYRABBIT, Windows ALPC SYSTEM zero-day, and F5 PoisonedRefresh fileless webshell....
