Federal Agencies Face Urgent Deadline to Patch Citrix NetScaler Vulnerability
PremiumCISA mandates immediate patching of Citrix NetScaler (CVE-2026-8452) after active exploitation; federal agencies have an urgent deadline.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesWednesday, August 26
Cyberattack Causes UK Power Plant Outage and Car Systems Infection
SANS roundup: UK power plant outage, car proxy-malware botnet, and N-able Passportal/Keycloak vulnerability fixes.
Iranian Cyberattack Highlights Vulnerabilities in UK Critical Infrastructure
Iran-linked cyberattack on a UK power plant underscores vulnerabilities in critical national infrastructure and small energy assets.
WordPress Sites Under Siege from MiniOrange Plugin Vulnerabilities
Authentication bypasses CVE-2026-61979 and CVE-2026-15981 in miniOrange SAML 2.0 plugin are being exploited to forge admin logins.
Australian Cybersecurity Center Urges Immediate Action on TeamCity Vulnerability
Australian authorities warn of active exploitation of a critical TeamCity flaw; customers urged to patch immediately.
Zimbra Servers Under Siege by Exploiting RCE Vulnerability
Over 270 Zimbra servers compromised via CVE-2026-73570 RCE; CISA issued a rapid patch directive.
Critical Oracle WebLogic Flaw Demands Immediate Attention
CISA says CVE-2026-21962 in Oracle WebLogic is actively exploited, enabling remote compromise; immediate patching recommended.
Monday, August 24
wp2shell Exploit Attempts Highlight Urgency in Vulnerability Response
Premiumwp2shell critical chain saw 45 million exploit attempts, illustrating compressed vulnerability exploitation windows for popular WordPress sites.
Microsoft Defender Driver Exploited for Kernel-Level File Deletion
PremiumCheck Point shows Microsoft Defender's signed BTR.sys boot-time driver can be misused for kernel-level deletion of security files at boot.
Isolated-vm Bug in Node.js Enables Host System RCE
PremiumType-confusion V8 sandbox bug enables isolated-vm escape and remote code execution on the host process.
Cisco Urges Immediate Updates After Discovering Critical Flaws
PremiumCisco fixes nine Crosswork and Secure Workload vulnerabilities, five rated CVSS 10.0 requiring urgent updates.
CISA Demands Immediate Patching of TrueConf Server Vulnerabilities
PremiumCISA ordered immediate patching of TrueConf Server vulnerabilities that are being actively abused to deploy malware.
Critical Vulnerability in Microsoft Entra ID Addressed Amid Exploitation Concerns
PremiumCritical Entra ID RCE patched; exploited reports prompted emergency guidance and wide Microsoft updates.
Friday, August 21
Cloudflare Workers Vulnerable to Spectre Attack: JWTs Exposed
PremiumResearchers demonstrate Spectre-based Cloudflare Workers side-channel leaking JWTs from co-located workers at ~12 bits/second.
Clop Cybercrime Group Exploits PTC Vulnerability in Major Data Theft Campaign
PremiumInvestigation reveals Clop likely exploited critical PTC Windchill vulnerability in June, initiating extended extortion and data theft.
Critical Flaws in NASA's AIT-GUI Expose Spacecraft Command Vulnerabilities
PremiumChain of AIT-GUI flaws (GHSA-p9r8-2q67-fp86) allows unauthenticated attackers to issue arbitrary spacecraft commands (CVSS 9.4).
Microsoft Copilot Vulnerability Exposes Sensitive Data to Single-Click Threat
PremiumCVE-2026-24301 'CoSnitch' in Microsoft Copilot Personal allowed one-click exfiltration of connected-account data; patched Aug 18.
GitLab Vulnerability Exploited Within Days, Urgent Patch Required
PremiumCVE-2026-19478 in GitLab allows unauthenticated modification or deletion of public projects and user data; exploitation observed.
Zimbra Collaboration Servers Under Siege from Exploited RCE Vulnerability
PremiumCERT Polska reports active exploitation of critical Zimbra RCE (CVE-2026-73570) targeting collaboration servers.
Citrix Urges Immediate Patching of Critical NetScaler Vulnerabilities
PremiumCritical Citrix NetScaler authentication-bypass patches issued; exploitation expected without authentication across gateways and ADCs.
Get these articles delivered to your inbox.
Subscribe free