Posts Tagged ‘patch management’
Zyxel GS1900 Switch Vulnerability: Patch Missed It
A Zyxel GS1900 switch vulnerability shows why “patched” on an asset list is not proof of safety: switches that already carried Zyxel’s June fix stayed open to the exploit attackers actually used. Binarly traced the attacks to a second flaw, CVE-2026-107441 (CVSS 8.8 per SecurityWeek, 9.8 per Binarly). Zyxel fixed it on October 22 with…
Read MoreFridge Cyberattack Second Wave Reaches Germany
The fridge cyberattack second wave reached Germany overnight on November 2. More than 100 stores across Europe saw their fridges and freezers heat up, some units to 50 °C. The BSI says it knows of incidents at individual German supermarkets, and an Edeka store in Reisbach, Bavaria, has confirmed that its cooling was switched to…
Read MoreWordPress Core RCE Vulnerability Hits Core Updates
A WordPress core RCE vulnerability can be triggered while a site updates itself: during a full core upgrade, the new files sit for a short time in a predictable folder that anyone can request. Wordfence assigned it CVE-2026-119977 (CVSS 8.1), and CISA added it to the Known Exploited Vulnerabilities catalog on November 3 with a…
Read MoreSynology NAS Ransomware Hits Outdated DSM
Synology NAS ransomware is hitting devices that run outdated DSM versions. On October 29, Synology said attackers are exploiting a vulnerability it patched in December 2024 to encrypt data and demand a ransom. Qihoo 360 names the malware C3RB3R, a Cerber variant. As of November 2, which flaw gets attackers in is disputed, and neither…
Read MoreLinux Kernel TCP Flaw Gets AI-Built Root Exploit
A Linux kernel TCP flaw now has a working remote root exploit, and an AI model built it. CVE-2026-98432 (CVSS 9.8) is a use-after-free in the IPv4 TCP handshake that has been in the kernel since version 4.4. As of November 2, Debian and Red Hat ship fixed kernels, Ubuntu still lists its fixes as…
Read More