Collaborate Disseminate
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
The post Critical Xen Orchestra Flaws Exploited in Attacks appeared first on SecurityWeek.
Continue reading Critical Xen Orchestra Flaws Exploited in Attacks
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
The post Asus, Zoom Release Security Patches appeared first on SecurityWeek.
Continue reading Asus, Zoom Release Security Patches
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
The post Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities appeared first on SecurityWeek.
Continue reading Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
The post Fortinet Patches Nearly 100 Vulnerabilities appeared first on SecurityWeek.
Continue reading Fortinet Patches Nearly 100 Vulnerabilities
The flaws, CVE-2026-111793 and CVE-2026-20320, let attackers leak sensitive information, including configuration data.
The post Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities appeared first on SecurityWeek.
Continue reading Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
The security defects could allow attackers to bypass authorization and gain root access to devices.
The post Recently Patched Barracuda Vulnerabilities Exploited in Attacks appeared first on SecurityWeek.
Continue reading Recently Patched Barracuda Vulnerabilities Exploited in Attacks
The cybersecurity startup deploys a dedicated guardian agent for every AI agent in an organization’s environment.
The post WhiteMatter Raises $20 Million in Series A Funding appeared first on SecurityWeek.
Continue reading WhiteMatter Raises $20 Million in Series A Funding
SAP has published 42 new and updated security advisories, including nine that address critical-severity vulnerabilities.
The post SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities appeared first on SecurityWeek.
Continue reading SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities
Hackers used compromised Qubole IAM credentials to steal customer files, secrets, keys, environment variables, and credentials.
The post Over a Dozen Organizations Hit in Qubole Supply Chain Attack appeared first on SecurityWeek.
Continue reading Over a Dozen Organizations Hit in Qubole Supply Chain Attack
Attackers could exploit the flaws for remote code execution, credential theft, and administrator account creation.
The post N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days appeared first on SecurityWeek.
Continue reading N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days