U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Check Point and UnrealIRCd vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the flaws added to the catalog: CVE-2026-114713 (CVSS score of 8.6) is a high-severity command…

Malware & Threats Vulnerabilities & Zero-Day Threat Intelligence Open Source
Read the full article at Security Affairs Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
آی‌تی‌رسان

هک گسترده اطلاعات گواهینامه رانندگان اوبر؛ هزاران نفر قربانی نفوذ به سرویس‌دهنده هوش مصنوعی

شرکت اوبر اعلام کرد که اطلاعات شخصی و گواهینامه رانندگی هزاران راننده‌اش در پی نفوذ سایبری به یکی از ارائه‌دهندگان […] نوشته هک گسترده اطلاعات گواهینامه رانندگان اوبر؛ هزاران نفر قربانی نفوذ به سرویس‌دهنده هوش مصنوعی اولین بار در آی‌ تی‌ رسان منتشر شد.

CSO Online

The firewall becomes the foothold: Attackers turn Check Point gateways against customers

A firewall is intended to be a boundary attackers can’t cross. But firewalls face the web, making them just as vulnerable to attack as other systems, as evidenced by the emergency hotfixes released by Check Point Software for several of its products. The patches address a high-severity privilege escalation flaw, CVE-2026-123039, that gives attackers root privilege access and the ability to send commands to the Gaia O…

CSO Online

Thousands of GitHub repos hit with secret-stealing malware

Researchers have uncovered a campaign in which hijacked GitHub accounts spread secret-stealing malware across thousands of repositories. The payload executed in at least 1,806 repos, exfiltrating CI/CD secrets and cloud credentials. Aikido Security, which detected and documented the campaign, said the attackers used the 4,837 compromised accounts to open probe pull requests in 61,764 repositories starting Nov. 10. Ar…