Pre-auth INLINE scripts escape GraalVM. Fortinet is blocking thousands of attempts — upgrade to 3.30.2+....
Friday clock stories: Cisco ISE root bypass due Saturday, Acronis hosting LPE, MikroTik MikroTrick, Check Point management root....
Pre-auth login overflow yields root on Security Management / Log servers. Apply LivePatch sk1000155; lock Trusted Clients....
CERT.pl MikroTrick chain: SSH auth bypass + privilege escalation. Two CVEs already on CISA KEV....
Default-permissions LPE on Acronis cPanel/Plesk backup agents under limited targeted exploitation. Same Saturday clock....
CVSS 10 ISE/ISE-PIC API auth bypass can land root. Active exploitation; federal due date Saturday September 19....
Thursday brief: N-able N-central CVSS 10, JFrog Artifactory admin chain, Citrix NetScaler bypass, Google Pixel KEV due September 19....
CISA added a Pixel cellular-modem improper-authorization bug on September 16. Federal due September 19 — verify MDM security patch levels....
Critical NetScaler ADC/Gateway auth bypass patched August 19 is exploited since ~September 3 and now on CISA KEV. Emergency edge…
Wiz saw attackers chain Artifactory flaws into admin in under five minutes, then drop Groovy plugins and a Rust C2.…
CVSS 10 pre-auth RCE on on-prem N-central, exploited before disclosure. Patch Hotfix 4, then hunt stranger admins — especially .invalid…
CVSS 10 Magento template RCE exploited before the hotfix and still mass-scanned. Apply VULN-39341, hunt backdoors, rotate keys....
Unauthenticated CAPWAP overflow abused to deploy PivotC2 on FortiGate. Upgrade FortiOS and rotate harvested secrets....
