Tag

patching

13 stories

Cisco Patches CVE-2026-76418 as SSL VPN Flaw Crashes ASA and FTD Devices

Cisco has released security updates for a high‑severity zero‑day, CVE-2026-76418, after its Product Security Incident Response Team observed active exploitation in October 2026. The flaw allows unauthenticated remote attackers to trigger unexpected device restarts in Secure Firewall ASA and FTD software, causing denial-of-service and disruption of remote access. Cisco assigned the vulnerability a CVSS score of 8.6 and published its advisory on October 28, 2026. The issue was discovered by…

Saugata DattaOct 29, 20263 min read68

Cybersecurity

Critical Okta Access Gateway Flaw Could Let Admin-Level Input Trigger System Commands

Okta has published an advisory about a high-severity vulnerability in Okta Access Gateway that can allow specially crafted administrative input to trigger system command execution inside the appliance. The issue highlights the continuing importance of limiting and monitoring privileged access to management consoles and of applying vendor patches quickly when they address control-plane weaknesses. What happened Okta disclosed CVE-2026-115547, a vulnerability affecting Okta Access Gateway releases prior to 2026.10.2. According…

Saugata DattaOct 23, 20263 min read127

Hacking and Exploits

PHP2Shell Proof-of-Concept Goes Public — Potassium Botnet Attempts and What Defenders Should Do

Public proof-of-concept code for two critical PHP vulnerabilities—collectively dubbed PHP2Shell—has been released, and security teams have observed scanning and failed attempts to use the flaws to deliver botnet malware. While attempted exploitation is concerning, researchers stress that scans and blocked deliveries are not the same as confirmed successful compromises. The key takeaways are straightforward: review runtime configurations, apply the issued PHP fixes, and treat detection telemetry carefully so you don’t…

Saugata DattaOct 23, 20264 min read127

Cybersecurity

Citrix NetScaler Zero-Day in the Wild: Remote Code Execution, Web Shells and What to Do Now

A critical remote code execution flaw in Citrix NetScaler ADC and Gateway — tracked as CVE-2026-88771 — is being actively exploited to run commands on exposed appliances, install web shells and deliver malware. Observers report attackers using a staged technique that poisons logs, triggers a diagnostic process to execute embedded commands, and then attempts to persist via web shells or a FreeBSD x64 binary. With NetScaler devices frequently positioned at…

Saugata DattaOct 23, 20264 min read133

Cybersecurity

Cisco Expressway Flaw Lets Remote Attackers Run Commands as Root

Cisco has released fixes for a critical vulnerability in its Expressway product line that could allow remote attackers to execute operating-system commands with root privileges on affected devices. Tracked as CVE-2026-76466 and assigned a CVSS score of 9.8, the issue is specific to clustered deployments of Cisco Expressway Core (Expressway‑C) and Cisco Expressway Edge (Expressway‑E). Cisco published its advisory on October 21, 2026, and the company credited Stefan Aleksic of…

Saugata DattaOct 23, 20264 min read140

Cybersecurity

Global websites taken offline after critical PHP vulnerability forces emergency patches

Websites around the world went dark this week after security researchers uncovered a serious flaw in PHP, the programming language that underpins roughly 70% of the web. Governments and organisations ordered precautionary takedowns while a patch was released, but experts warned that a long tail of unmaintained sites could remain vulnerable for weeks or months — creating a persistent window for exploitation. What happened Researchers reported a critical vulnerability in…

Saugata DattaOct 22, 20264 min read151

Compliance and Privacy

Atlassian Urges Immediate Patching After Critical Arbitrary File-Access Flaw

Atlassian has released emergency fixes for a critical arbitrary file access vulnerability that affects eight of its products — including Jira, Confluence, and Bitbucket. Tracked as CVE-2026-21589 with a CVSS score of 9.3, the flaw allows unauthenticated attackers to retrieve specific files from an application’s web root if they can guess the exact path and filename. While the bug does not let attackers enumerate directories, the ability to fetch particular…

Saugata DattaOct 6, 20264 min read236

Automation

Critical GitLab AI Gateway Flaw: What Administrators Need to Do Now

GitLab has pushed an urgent set of security updates after disclosing a critical vulnerability in its AI Gateway that could allow authenticated users to run arbitrary commands on the gateway. Tracked as CVE-2026-90970 and rated CVSS 9.9, the flaw affects self-hosted AI Gateway deployments that support GitLab Duo AI features. While GitLab’s hosted gateways have already been patched, organizations running their own gateways must act immediately to mitigate a high-impact…

Saugata DattaOct 3, 20264 min read257

Hacking and Exploits

Firefox 149 Ships: Patches for 37 Vulnerabilities, Including Multiple Sandbox Escapes

Mozilla released Firefox 149 on March 24, 2026, in one of the browser’s largest security updates in recent memory. The release fixes 37 vulnerabilities across memory corruption, sandbox escapes, use‑after‑free bugs, JIT miscompilation, and other issues that could enable remote code execution or privilege escalation. Given the number and seriousness of these fixes — 16 high‑severity issues among them — users and organizations should prioritize updating without delay. A clear…

Saugata DattaMar 26, 20266 min read598

Cybersecurity

Citrix Warns: Patch NetScaler ADC and Gateway Flaws Immediately

Citrix has released urgent security updates for NetScaler ADC and NetScaler Gateway after discovering two vulnerabilities that could expose sensitive session data and cause session mix-ups. The company is urging administrators to apply the fixes as soon as possible, citing the potential for exploitation that echoes earlier high-profile memory-leak bugs that were actively abused in the wild. What happened Earlier this month Citrix published advisories addressing CVE-2026-3055 and CVE-2026-4368. The…

Saugata DattaMar 25, 20264 min read655

Cybersecurity

Microsoft .NET Out-of-Bounds Read (CVE-2026-26127) Causes Remote Denial-of-Service Risk

Microsoft has issued an emergency security update to address a newly disclosed vulnerability in the .NET ecosystem that can be triggered remotely and results in denial-of-service (DoS) conditions. The flaw, tracked as CVE-2026-26127, affects multiple .NET runtime and package versions across Windows, macOS, and Linux. Administrators and developers should prioritize applying the available patches to prevent service disruption. What the vulnerability is CVE-2026-26127 is an out-of-bounds read vulnerability (CWE-125). An…

Saugata DattaMar 11, 20263 min read633

AI Agents and Frameworks

When Local Trust Breaks: The OpenClaw 0-Click Vulnerability and What Developers Must Do Now

The speed at which developer-facing AI agents have been adopted is staggering — and rapid adoption often outpaces secure design. A recent, high-impact vulnerability in OpenClaw demonstrates how a single innocuous browser visit can be transformed into a full agent takeover. For developers and security teams, this is a reminder that conveniences like “localhost-first” assumptions carry real risk. This post explains the vulnerability in accessible terms, why it matters especially…

Saugata DattaMar 1, 20264 min read654

Free Tools: IP, DNS, SSL