Vulnerabilities

Vulnerabilities

Remote defrost attack disrupts refrigeration at French supermarkets

Attackers reportedly triggered defrost cycles on refrigeration controllers at French supermarkets, raising temperatures as Paris prosecutors investigate.

Oct 12, 202617:43 2 min readRead →

Vulnerabilities

Windows 11 23H2 Enterprise and Education Get Final Security Update in November 2026

Microsoft says Windows 11 23H2 Enterprise, Education and IoT Enterprise get their last security update in November 2026 and should upgrade to 26H2.

Oct 12, 202613:20 1 min readRead →

Vulnerabilities

Bricksforge RCE and two stored-XSS flaws draw attacks on WordPress sites

Attackers exploit Bricksforge flaw to upload files as PHP without login, risking site takeover. Update advised and check uploads for abuse.

Oct 12, 202611:01 4 min readRead →

Vulnerabilities

Let's Encrypt will shorten default certificate lifetime to 64 days in February 2027

Let's Encrypt will issue 64-day certificates by default from Feb 10, 2027, ahead of 45-day lifetimes, with renewal guidance and shorter validation reuse.

Oct 12, 202609:09 2 min readRead →

Vulnerabilities

CISA flags five older flaws in ProFTPD, Struts, BIND, ONLYOFFICE and Strapi as exploited

CISA added five older ProFTPD, Struts, BIND, ONLYOFFICE and Strapi flaws to KEV amid reported China-linked exploitation campaign.

Oct 11, 202611:08 4 min readRead →

Vulnerabilities

Huntress: AhsayCBS bugs CVE-2026-105133 and CVE-2026-105134 exploited to drop web shells and XMRig miners

Huntress reports attackers chaining AhsayCBS flaws CVE-2026-105133 and CVE-2026-105134 to deploy web shells and XMRig miners. Learn details.

Oct 9, 202619:33 3 min readRead →

Vulnerabilities

P7 DarkSword iOS Variant Steals Crypto Wallets and Accepts Remote Commands, iVerify Says

iVerify reports P7 DarkSword iOS variant steals keychain and wallet data and accepts remote commands; Censys describes linked servers and operator claims.

Oct 9, 202618:20 5 min readRead →

Vulnerabilities

CISA Adds ProFTPD, Struts, BIND, ONLYOFFICE and Strapi Flaws to KEV Over Flax Typhoon Abuse

CISA added ProFTPD, Struts, BIND, ONLYOFFICE and Strapi flaws to KEV following reported Flax Typhoon exploitation and joint advisory.

Oct 9, 202614:21 4 min readRead →

Vulnerabilities

NetScaler SAML Deployments Face RCE and Crash Risk From CVE-2026-107406

Reported CVE-2026-107406 memory overflow in SAML-configured NetScaler ADC and Gateway may allow RCE or crashes, varying by build and IdP/SP role.

Oct 9, 202610:15 5 min readRead →