Tag

Vulnerability

3 stories

Atlassian Urges Immediate Patching After Critical Arbitrary File-Access Flaw

Atlassian has released emergency fixes for a critical arbitrary file access vulnerability that affects eight of its products — including Jira, Confluence, and Bitbucket. Tracked as CVE-2026-21589 with a CVSS score of 9.3, the flaw allows unauthenticated attackers to retrieve specific files from an application’s web root if they can guess the exact path and filename. While the bug does not let attackers enumerate directories, the ability to fetch particular…

Saugata DattaOct 6, 20264 min read90

Azure

One-Click RCE in Azure Windows Admin Center: what happened and what you need to do

Windows Admin Center (WAC) is a convenient, browser-based management hub for administrators to manage servers, clients, and clusters from a centralized interface. A recent Cymulate Research Labs disclosure describes a critical chain of flaws that let an attacker achieve unauthenticated, one-click remote code execution (RCE) against both Azure-integrated and on-premises WAC deployments. The exploit requires little user interaction—a maliciously crafted link—and, if successful, can silently execute arbitrary commands and take…

Saugata DattaApr 17, 20265 min read249

Cybersecurity

Cisco Under Fire: Zero-Day in Secure Firewall Management Center Powers Interlock Ransomware

A critical zero-day vulnerability in Cisco Secure Firewall Management Center (FMC) — tracked as CVE-2026-20131 — has been exploited in the wild to deploy Interlock ransomware. The timeline and technical details reported by independent researchers make this a clear, urgent warning for organizations running Cisco FMC: an unauthenticated remote exploit can lead to arbitrary Java code execution with root privileges, and threat actors used it to build a sophisticated, multi-stage…

Saugata DattaMar 19, 20264 min read562

Atlassian Urges Immediate Patching After Critical Arbitrary File-Access Flaw

One-Click RCE in Azure Windows Admin Center: what happened and what you need to do

Cisco Under Fire: Zero-Day in Secure Firewall Management Center Powers Interlock Ransomware

Free Tools: IP, DNS, SSL