
Critical NX-OS Validation Flaws Expose Some Nexus Switches to Root-Level Attacks
Cisco disclosed five critical, configuration-dependent NX-OS flaws that could allow remote code execution as root or disrupt some Nexus switches.

Cisco disclosed five critical, configuration-dependent NX-OS flaws that could allow remote code execution as root or disrupt some Nexus switches.

Cisco issued updates for 35 flaws across NX-OS, APIC, License On-Prem, Meraki and Finesse, including root execution and reload risks.

DNS changes in .gh, .sl, .as led to unauthorized Google and YouTube certificates. Google says no breach of its systems, misuse unconfirmed.

LMCache distributed mode can allow unauthenticated code execution via unsafe pickle deserialization on ZeroMQ port when bound beyond localhost.

Researchers saw honeypot probing within hours of public PoC release for an unauthenticated file-access flaw affecting eight Atlassian self-hosted products.

Google's Chrome 155 desktop update fixes 247 security issues, including critical use-after-free flaws enabling code execution outside sandbox.

Malicious spreadsheets can execute remote Java code in LibreOffice Calc and OpenOffice via JDBC without macro warning. See affected versions and fixes.

September 2026 saw 39 cybersecurity M&A deals, with Dragos, Palo Alto Networks and IBM expanding OT, AI security and public-sector portfolios.

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.