The Edge of the Cyber World See the latest
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges. The post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation appeared first on SecurityWeek.
The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools. The post Thai Broadband Provider Hacked via Fortinet Vulnerability appeared first on SecurityWeek.
The U.S. Cybersecurity and Infrastructure Security Agency confirmed this week that ransomware gangs are now exploiting a critical WatchGuard Firebox firewall vulnerability, a flaw that has sat on the agency’s Known Exploited Vulnerabilities catalog since December 2025. The update, reported first by BleepingComputer, arrived in a routine Thursday KEV catalog refresh that flipped the entry’s…
The Cybersecurity and Infrastructure Security Agency confirmed on September 15, 2026, that ransomware gangs have joined an already active espionage campaign targeting a critical VMware vCenter Server flaw, according to BleepingComputer. The vulnerability, tracked as CVE-2026-59310, carries a CVSS score of 9.8 and lets an unauthenticated attacker with network access to a vCenter instance execute…
Anyone searching “Jamf vs Intune vs Kandji” in September 2026 is about to hit a wall of stale results. Kandji does not exist as a brand anymore. The company renamed itself Iru on October 22, 2025, and folded in Windows and Android management alongside its original Apple-only focus. Jamf, meanwhile, is no longer a public…
A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE. Volexity, which is tracking the threat cluster under the moniker UTA0560, said the activity targeted multiple non-governmental organizations (NGOs) on September 1, 2026. “The
Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing…
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that’s designed to steal cloud credentials, configurations from Amazon Web Services (AWS) and Microsoft Azure instances, and infrastructure state files, per F5 Labs. The
A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an advisory published on September 14. On such servers, many customers’ sites run on a single machine, and an attacker with one of those hosting accounts could exploit the flaw to access…
With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as swiftly after gaining initial access. In one instance highlighted by the cloud security company, the threat actor pivoted from a vulnerable…
