SOCRadar پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۵:۱۷

Zyxel GS1900 Zero-Day: Patch 3 Fixes Bypassed Bug

Zyxel has released new firmware for 10 GS1900 switch models to fix CVE-2026-107441, an out-of-bounds write that lets an unauthenticated attacker run OS commands on the switch. The flaw sits underneath an exploit that attackers had already used against nearly 1,000 GS1900 switches, and that exploit still works on the firmware Zyxel shipped in June […]

Vulnerabilities & Zero-Day IoT & OT Security

Read the full article at SOCRadar Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

SecurityWeek پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۶:۲۸

Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised

The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked. The post Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised appeared first on SecurityWeek.

IoT & OT Security

Source

SecurityWeek پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۶:۰۳

Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws

Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws. The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws appeared first on SecurityWeek.

Vulnerabilities & Zero-Day Identity & Access Security

Source

CSO Online پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۵:۵۰

Debian, Ubuntu patch APT flaw that could hand attackers root

Linux administrators’ trust in package managers is being tested by a newly disclosed vulnerability in APT, the package management system used by Debian, Ubuntu, and their derivatives, that could allow attackers to install unverified software with root privileges. Tracked as CVE-2026-109518, the vulnerability could let an attacker positioned to manipulate HTTP traffic between an APT client and an archive server instal…

Vulnerabilities & Zero-Day Threat Intelligence Operating Systems

Source

Industrial Cyber پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۵:۴۰

VAPOR PANDA hackers use multi-agent AI to target government, pharmaceutical, semiconductor, defense organizations

New research from CrowdStrike has identified a global cyberespionage campaign by China-nexus threat actor VAPOR PANDA that uses... The post VAPOR PANDA hackers use multi-agent AI to target government, pharmaceutical, semiconductor, defense organizations appeared first on Industrial Cyber.

Malware & Threats Vulnerabilities & Zero-Day Phishing

Source