TL;DR Cisco has fixed a critical NX-API flaw, CVE-2026-76471, that could let an unauthenticated attacker run code as root on Nexus switches. Alongside it, Cisco shipped a hardening release that gr…

TL;DR Cisco has released fixes for four critical Cisco Nexus vulnerabilities, each rated 9.8 on CVSS. The flaws sit in the OAM features of NX-OS on Nexus 3000 and 9000 Series switches. An unauthen…

TL;DR Splunk has released two advisories that fix 22 Splunk Enterprise vulnerabilities across four supported branches. The worst, CVE-2026-76268, lets an unauthenticated attacker run operating-sys…

TL;DR IBM has released fixes for 23 IBM DataPower Gateway vulnerabilities across two security bulletins. Four rate Critical, including two remote code execution flaws scored 9.8 that need no login…

Cyber threats never sleep—which is why your protection shouldn't either.

TL;DR Citrix has published a critical bulletin for CVE-2026-107406, a memory overflow flaw in NetScaler ADC and NetScaler Gateway rated 9.5 on CVSS v4.0. This Citrix NetScaler vulnerability &#8220…

At a Glance Malware family Rogue ScreenConnect clients and a defense evasion tool Threat actor Unknown; no attribution Targets A handful of endpoints, plus 22 more linked by a retroactive hunt (Hu…

Google Plans to Remove Client-Side XSLT Google plans to deprecate client-side XSLT support in Chromium browsers. As a result, the Remote Desktop Web Access pages on Windows Server may stop renderi…

TL;DR CERT/CC published a note on October 12, 2026, listing 11 Thelia vulnerabilities in the open-source e-commerce platform. Seven of them can lead to remote code execution by an authenticated ba…