Please confirm you are human

This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.

A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.

Hold with a pointer, or hold Space or Enter.

News

SecurityWeek
securityweek.com > critical-netscaler-vulnerability-exploited-in-attacks

Critical NetScaler Vulnerability Exploited in Attacks

2+ day, 16+ hour ago   (460+ words) Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3. The US Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday warned that threat actors have been exploiting a critical-severity NetScaler vulnerability in attacks....

SecurityWeek
securityweek.com > organizations-warned-of-cisco-secure-fmc-exploitation

Organizations Warned of Cisco Secure FMC Exploitation

2+ day, 18+ hour ago   (578+ words) Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026. Cisco and the cybersecurity agency CISA on Wednesday flagged the exploitation of a Cisco Secure Firewall Management Center (FMC) vulnerability disclosed earlier this year. The security hole,…...

SecurityWeek
securityweek.com > ics-patch-tuesday-schneider-electric-siemens-fix-critical-flaws

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws

3+ day, 17+ hour ago   (489+ words) Industrial giants Schneider Electric, Siemens, and Aveva have published September 2026 Patch Tuesday advisories, informing customers about vulnerabilities found in their ICS products. Schneider Electric published four new security advisories and updated four others, including one originally released in 2019. The most…...

SecurityWeek
securityweek.com > ivanti-patches-critical-flaws-across-enterprise-security-products

Ivanti Patches Critical Flaws Across Enterprise Security Products

3+ day, 18+ hour ago   (410+ words) Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches for authentication bypass flaws. Ivanti on Tuesday announced security updates that address vulnerabilities rated critical and high severity in its Neurons for…...

SecurityWeek
securityweek.com > mikrotik-patches-critical-flaws-chained-to-hack-routers

MikroTik Patches Critical Flaws Chained to Hack Routers

4+ day, 17+ hour ago   (570+ words) Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices. Network equipment maker MikroTik has rolled out patches for six vulnerabilities in RouterOS, urging users to apply them as soon as possible, as two…...

SecurityWeek
securityweek.com > hpe-patches-critical-rce-vulnerabilities-in-aos-cx-2

HPE Patches Critical RCE Vulnerabilities in AOS-CX

1+ week, 15+ hour ago   (479+ words) Hewlett Packard Enterprise (HPE) has released patches for 34 CVEs in its Aruba Networking ArubaOS-CX (AOS-CX) platform, including critical-severity remote code execution (RCE) flaws. Per HPT’s advisory, more than 150 flaws were resolved in AOS-CX versions 10.18.1002, 10.17.1030, 10.16.1060, 10.13.1190, and 10.10.1181. Many of these bugs are…...

SecurityWeek
securityweek.com > sangoma-switchvox-vulnerabilities-exploited-in-the-wild

Sangoma Switchvox Vulnerabilities Exploited in the Wild

1+ week, 1+ day ago   (533+ words) Tracked as CVE-2026-9586, the unauthenticated SQL injection flaw can be exploited remotely for arbitrary code execution. Threat actors have been exploiting a critical-severity vulnerability in the enterprise VoIP telephony management solution Sangoma Switchvox, Horizon3 and CISA warn. Tracked as CVE-2026-9586 (CVSS…...

SecurityWeek
securityweek.com > vmware-workstation-and-fusion-updates-patch-critical-vulnerability

VMware Workstation and Fusion Updates Patch Critical Vulnerability

1+ week, 1+ day ago   (440+ words) The flaws could allow attackers with administrative access to a virtual machine to execute code on the host system. Broadcom on Thursday announced patches for two critical and high-severity vulnerabilities in VMware Workstation and Fusion. The first issue, tracked as…...

SecurityWeek
securityweek.com > cisco-warns-of-unpatched-secure-email-flaws-patches-critical-switch-vulnerabilities

Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities

1+ week, 2+ day ago   (546+ words) Publicly disclosed S/MIME flaws could expose encrypted email content, while critical IOS XR and Nexus bugs could enable remote code execution and authentication bypass. Cisco on Wednesday warned that two unpatched vulnerabilities in its enterprise email security product Secure…...

SecurityWeek
securityweek.com > rockwell-automation-patches-over-a-dozen-vulnerabilities-across-products

Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products

1+ week, 3+ day ago   (485+ words) The industrial giant has released advisories for its RSLinx Classic, ArmorStart, ControlFLASH, FactoryTalk, and other products. Rockwell Automation on Tuesday informed customers that patches or workarounds are available for more than a dozen vulnerabilities discovered across its industrial automation products....