Posts Tagged ‘edge-device’
Zyxel GS1900 Switch Vulnerability: Patch Missed It
A Zyxel GS1900 switch vulnerability shows why “patched” on an asset list is not proof of safety: switches that already carried Zyxel’s June fix stayed open to the exploit attackers actually used. Binarly traced the attacks to a second flaw, CVE-2026-107441 (CVSS 8.8 per SecurityWeek, 9.8 per Binarly). Zyxel fixed it on October 22 with…
Read MoreCisco Firewall DoS Flaw Exploited in ASA and FTD
A Cisco firewall DoS flaw is being exploited: one crafted request to the SSL VPN login can make a Cisco ASA or Secure FTD firewall reload unexpectedly. Cisco tracks it as CVE-2026-76418 (CVSS 8.6), and CISA added it to the Known Exploited Vulnerabilities catalog on October 29. Only firewalls with secondary authentication set on a…
Read MoreSafePay Ransomware Wipes Backups First
SafePay ransomware has compromised at least 600 organizations since August 2024, and a joint advisory published on October 20 says its operators halt shadow copies and reset backup storage before they encrypt anything. The FBI, CISA and the US Secret Service wrote it together with Germany’s Landeskriminalamt Rheinland-Pfalz and UK law enforcement (the National Crime…
Read MoreCisco Secure Email Gateway Zero-Day Exploited Again
A Cisco Secure Email Gateway zero-day is under attack: one email with a crafted attachment lets an unauthenticated attacker write files and run commands as root. Cisco tracks it as CVE-2026-76519 (CVSS 9.8), and CISA added it to the Known Exploited Vulnerabilities catalog on October 14. It is the second Secure Email Gateway flaw exploited…
Read MoreIvanti Connect Secure Zero-Day Chain Reaches Root
Volexity found an Ivanti Connect Secure zero-day chain that gave one attacker unauthenticated root on a VPN appliance running the latest build at the time. Ivanti has fixed two of the three flaws. As of October 14, the third, the privilege escalation that turns a web-server foothold into root, has no fix. Ivanti’s own Integrity…
Read More