Friday's 5-minute cyber brief: ransomware on TeamCity build servers, exploited Roundcube webmail, cPanel root for any account, and a risky GitLab email token.
CySA+ CS0-004 facts from CompTIA: 85 questions, 165 minutes, 750 to pass, $439. Domain weights, an 8-week lab plan, 5 practice questions, and when CS0-003 retires.
Shared kernel, pre-auth, PoCs out. Role checks won’t save you....
WordPress under active exploitation, Tomcat WebSocket bypass, Palo Alto HIGHEST urgency, SAP OVERPASS with public PoCs....
Attackers went from probing to writing PHP in under a day. Verify you’re on a fixed release....
If auth sits in a Tomcat security constraint, an alternate endpoint name can skip it....
No known exploit yet — that’s the window, not a reason to wait....
AI security tools can miss threats when attackers craft adversarial inputs. Here’s how malware, phishing, and behavior models get fooled…
CISA added two Check Point CVSS 9.8s to KEV yesterday. Federal due September 25 — patch gateways and management Jumbo…
Unauth data-plane RCE when a VIP has both APM and an OAuth profile. Hotfixes and interim iRule out; federal due…
Actively exploited CVSS 10 on on-prem VCO. Hosted patched; on-prem needs fixed builds and an IoC hunt....
In-the-wild V8 write; Chrome 153.0.8010.36/.37 fixes it. Federal KEV due is today — verify Edge and other Chromium browsers too....
Check Point VPN+mgmt KEV due Friday, F5 APM OAuth RCE, Arista VeloCloud CVSS 10, Chromium V8 due today....
