TECHNO CHATTECH BLOG
Tag

CISA

12 stories
Cisco BroadWorks flaw enters CISA’s actively exploited catalog
Cybersecurity

Cisco BroadWorks flaw enters CISA’s actively exploited catalog

The US Cybersecurity and Infrastructure Security Agency has marked a high-severity Cisco BroadWorks vulnerability as actively exploited in attacks. Cisco BroadWorks is a cloud unified communications platform used by telecom carriers and managed service providers to offer branded cloud PBX, voice, and collaboration services to business customers. CISA’s new warning centers on CVE-2026-20320, which stems from improper restriction of an XML External Entity reference weakness in the Open Client Interface…

Saugata Datta2 min read24
Apple fixes iMessage group chat privacy flaws
Automation

Apple fixes iMessage group chat privacy flaws

Apple released updates after an iMessage flaw was said to let a remote attacker join a group chat and receive its messages. The company also fixed a separate iMessage flaw that could let someone added to a group read messages sent before they joined. Apple update notes and iMessage flaws As of today, the company’s notes for the iPhone XS, XS Max and XR, the iPad 7th generation, and some…

Saugata Datta2 min read48
PowerSYSTEM Center flaws prompt CISA to warn on unauthorized access
Generic

PowerSYSTEM Center flaws prompt CISA to warn on unauthorized access

CISA has warned about two critical PowerSYSTEM Center flaws with CVSS 9.0 scores that could let authenticated users reach administrator resources or run unauthorized database commands. The issue affects energy and manufacturing sectors worldwide, and the advisory says the vulnerabilities are not remotely exploitable. The agency issued advisory ICSA-26-307-01 on November 3, 2026. CISA credited Chinmay Patel of Digital Boundary Group and Subnet Solutions with reporting the vulnerabilities. The Canadian…

Saugata Datta3 min read55
Industrial refrigeration systems face federal warning over hacker intrusion risk
Business & Politics

Industrial refrigeration systems face federal warning over hacker intrusion risk

CISA, the FBI, HHS, USDA, and the Department of Transportation have warned that hackers are targeting industrial refrigeration and cold chain monitoring systems worldwide. The warning says food, medicine, and other temperature-sensitive goods are at risk, and it was issued on November 5, 2026. The joint federal fact sheet covers systems used in healthcare, chemicals, food production, agriculture, and transport, including refrigerated delivery services. It also says malicious activity has…

Saugata Datta3 min read60
U.S. government warns industrial refrigeration users of an ongoing cyber threat
Cybersecurity

U.S. government warns industrial refrigeration users of an ongoing cyber threat

The U.S. government has warned that industrial refrigeration units face an “ongoing cyber threat” after reports of cyberattacks on freezers and fridges in supermarkets around the world, U.S. military bases, and at least one blood bank. The alert covers internet-connected refrigeration and cold chain monitoring systems in grocery stores and cold storage facilities, and it says the hacks are affecting the food, agriculture, transportation, and medicine-shipping industries. Federal warning on…

Saugata Datta2 min read89
Ivanti’s latest Connect Secure fix blocks two chained flaws
Cybersecurity

Ivanti’s latest Connect Secure fix blocks two chained flaws

Ivanti has released security updates for two more Connect Secure remote access gateway flaws that were chained in zero-day attacks starting at least on October 1. The two issues, CVE-2026-111357 and CVE-2026-118527, were used together with CVE-2026-104935, an authentication bypass flaw patched last month. Attack chain details CVE-2026-111357 is a high-severity privilege escalation issue. CVE-2026-118527 allows authenticated attackers to upload files on an unpatched device. Ivanti said in an advisory…

Saugata Datta2 min read150
Active exploitation of critical GitLab regex flaw forces urgent patching
Cybersecurity

Active exploitation of critical GitLab regex flaw forces urgent patching

Attackers have begun exploiting a maximum-severity vulnerability in GitLab that can allow remote code execution, prompting immediate warnings from GitLab and the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw, tracked as CVE-2026-97229, stems from an integer overflow in GitLab's CI/CD Regular Expression Compiler and can be triggered by a malicious regular expression in a pipeline configuration. The flaw at a glance CVE-2026-97229 is an integer overflow weakness in…

Saugata Datta2 min read192
CISA Flags Two High-Severity Flaws: Collabora CODE and Arista VeloCloud Targeted in the Wild
Cybersecurity

CISA Flags Two High-Severity Flaws: Collabora CODE and Arista VeloCloud Targeted in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after reports of active exploitation. Both flaws carry very high CVSS scores and have been observed in real-world attacks, prompting public advisories and vendor patches in September and October 2026. The vulnerabilities at a glance CVE-2026-110447 (CVSS 9.2) — An operating system command injection in Collabora Online’s Built-in CODE Server…

Saugata Datta2 min read263
CISA Flags Actively Exploited Adobe ColdFusion Path Traversal (CVE-2026-48282)
Cybersecurity

CISA Flags Actively Exploited Adobe ColdFusion Path Traversal (CVE-2026-48282)

Adobe ColdFusion administrators woke up to an urgent warning this week: a critical path traversal vulnerability (CVE-2026-48282) is being actively exploited in the wild. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the flaw to its Known Exploited Vulnerabilities (KEV) catalog on July 7, 2026, and issued a binding remediation timeline for federal agencies under BOD 26-04 that requires action by July 10, 2026. Because ColdFusion is frequently internet-facing…

Saugata Datta4 min read443
CISA orders federal agencies to patch CVE-2026-32202 after zero-click NTLM hash leak is reported
Cybersecurity

CISA orders federal agencies to patch CVE-2026-32202 after zero-click NTLM hash leak is reported

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure Windows systems against a vulnerability tracked as CVE-2026-32202 after cybersecurity firm Akamai reported it as a zero-click NTLM hash leak left behind when Microsoft incompletely patched a February remote code execution flaw (CVE-2026-21510). CISA added CVE-2026-32202 to its Known Exploited Vulnerabilities (KEV) Catalog and mandated that Federal Civilian Executive Branch agencies patch affected endpoints and servers…

Saugata Datta2 min read538
CISA: Zimbra XSS (CVE-2025-48700) Now Exploited — 10,500+ Servers Vulnerable
Cybersecurity

CISA: Zimbra XSS (CVE-2025-48700) Now Exploited — 10,500+ Servers Vulnerable

Over 10,000 instances of the Zimbra Collaboration Suite are exposed online and remain vulnerable to an actively exploited cross-site scripting flaw, raising fresh alarms about email server security for governments and businesses alike. The vulnerability, tracked as CVE-2025-48700, is serious because it can be triggered without user interaction and has been confirmed as abused in the wild, prompting action from both vendors and national cybersecurity authorities. What happened Shadowserver, an…

Saugata Datta4 min read609
Chrome 0‑Day Under Active Attack: CVE‑2026‑2441 — What You Need to Do Now
Cybersecurity

Chrome 0‑Day Under Active Attack: CVE‑2026‑2441 — What You Need to Do Now

Google has released an emergency patch for a high‑severity zero‑day in Chrome after confirming active exploitation in the wild. Tracked as CVE‑2026‑2441, the vulnerability is a use‑after‑free bug in Chrome’s CSS handling that can enable remote code execution when a user visits crafted web content. How the flaw works CVE‑2026‑2441 arises from improper lifecycle management of objects in the rendering engine’s CSS processing, leaving freed memory accessible and exploitable. An…

Saugata Datta3 min read1.1K
🧰

Free Tools: IP, DNS, SSL

40+ free network and other tools in one place. No signup. Click explore or visit https://technochat.in/tools

Explore