Cybersecurity Archives - Page 3 of 57

Attackers can reboot Cisco firewalls through the VPN login page with one request. Upgrade before Sunday’s deadline

Cisco ASA and Secure FTD CVE-2026-76418 lets an unauthenticated attacker reload a firewall through the SSL VPN login. Exploited, CISA KEV due Nov 1. Fixed releases and checks.

Thursday’s brief: PHP2Shell attackers root firewalls with a Linux bug, then WordPress 7.1.4, Jenkins and Oracle E-Business Suite

Linux Fragnesia CVE-2026-46300 on CISA KEV after a PHP2Shell firewall campaign, WordPress 7.1.4 security fixes, Jenkins 2.588 and Oracle EBS CVE-2026-101767 exploit attempts.

The Oracle E-Business Suite bug we flagged now has attackers testing it. Patch or close the servlet today

Defused saw exploit attempts on Oracle E-Business Suite CVE-2026-101767 on Oct 27. Apply the October 2026 CPU or remove /OA_HTML/AppsTCFServer from the URL firewall allowlist.

Jenkins users with basic access could run code on your build server. Upgrade to 2.588 or LTS 2.580.2

Jenkins Security Advisory 2026-10-28 fixes 15 core flaws, including XStream RCE CVE-2026-117612 and a setup wizard admin race CVE-2026-117618. Upgrade to 2.588 or LTS 2.580.2.

WordPress 7.1.4 fixes 22 security flaws, most open to anyone with a writer account. Check every site’s version

WordPress 7.1.4 (Oct 28, 2026) fixes 22 vulnerabilities, including an upgrade-window RCE and stored XSS in the Interactivity API and core blocks. Backports 7.0.8 and 6.9.11.

Attackers turned PHP2Shell break-ins into root on 24 firewalls with an old Linux bug. Boot a fixed kernel by Saturday

CISA added Linux kernel Fragnesia CVE-2026-46300 to KEV on Oct 28, due Oct 31, after Dream showed it chained with PHP2Shell to root 24 firewalls. Fixed kernels, memory checks and hunting steps.

Digital Forensics Certifications (2026): GCFA, CHFI, EnCE and CCE Compared

Digital forensics certifications compared: GCFA, GCFE, CHFI, EnCE and CCE. Exam formats, requirements, DoD 8140 listings for forensic analyst roles, who pays.

Wednesday’s brief: Magento stores hit through the shopping cart, then Apple updates, Microsoft Authenticator and Brotli exploits

Magento PolyShell CVE-2026-48356 and Brotli CVE-2026-111497 added to CISA KEV, Apple 27.2 and iOS 18.7.11 updates, and a Microsoft Authenticator Android token flaw, with first steps.

The Brotli bug we flagged is now under attack. Finish the Node.js and Python updates this week

ELLIO saw Brotli CVE-2026-111497 exploit traffic aimed at Node.js 24.22.0 on Oct 26, and CISA added it to KEV Oct 27. Update Node.js to 22.23.4, 24.22.1 or 26.12.1 and rebuild.

A rogue Android app could take over work accounts through Microsoft Authenticator. Check the version on every phone

CVE-2026-80097 let any Android app impersonate Teams and get Microsoft Authenticator tokens for mail, files and passkeys. Update Authenticator for Android to 6.2606.4246 or later.

Apple fixed 286 flaws and an exploited bug on older iPhones. Push the updates to every phone and Mac

Apple backported the exploited CoreGraphics fix CVE-2026-86950 to iOS 18.7.11 and shipped iOS 27.2, macOS Golden Gate 27.2, Tahoe 26.7.2 and Sequoia 15.8.2 with 286 fixes.

Attackers are uploading web shells to Magento stores through the shopping cart. Install Adobe’s July fix and check for intruders

CISA added Magento and Adobe Commerce PolyShell CVE-2026-48356 to KEV on Oct 27, due Nov 10. Install APSB26-73 July 2026 releases, block pub/media/custom_options and hunt for shells.

OT Security Certifications (2026): GICSP, ISA/IEC 62443 and CompTIA SecOT+ Compared

OT security certifications compared: GICSP, ISA/IEC 62443 certificates, CompTIA SecOT+ (launching December 2026) and GRID. Exams, requirements, who pays.