Search: “device code phishing”

6 stories in the last 30d

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Phishing & fraud 28 Threat actor 24 Exploit / PoC 16 Malware 15 Industry 13 Advisory 9 Research 7 AI safety & security 6 Policy & legal 6 Vulnerability 6 Data breach 4 Ransomware 1 AI policy 1 Tools 1

SeverityAll critical 9 high 59 medium 38 low 2 info 29

Critical Check Point VPN Flaws Let Unauthenticated Attackers Execute Remote Code

Check Point fixed critical unauthenticated RCE flaws CVE-2026-85102 and CVE-2026-85103 in its VPN gateways; no exploitation observed yet.

Check Point disclosed two critical vulnerabilities affecting Remote Access VPN and Site-to-Site VPN on its security gateways. CVE-2026-85102 is an authentication-bypass flaw that can lead to unauthenticated remote code execution, while CVE-2026-85103 is a heap overflow in ASN.1 decoding that can corrupt memory and also result in RCE. Fixes are available via Jumbo Hotfix, with Check Point Live Patch rollout starting September 9, 2026; the vendor found and fixed the issues through internal research and reports no evidence of exploitation in the wild.

GBHackersupdated 17:14 UTC · 5h agofirst Sep 11, 05:23 UTC · 5d agoVulnerability 9 sources CVE-2026-85102 CVE-2026-85103

Palo Alto PAN-OS Buffer Overflow Lets Attackers Execute Arbitrary Code as Root

Palo Alto Networks fixed CVE-2026-0310, a CVSS 9.2 unauthenticated PAN-OS buffer overflow enabling root code execution on PA-Series firewalls.

Palo Alto Networks published an advisory on September 9, 2026 for CVE-2026-0310, a CWE-787 out-of-bounds write in PAN-OS XML processing with a CVSS v4.0 base score of 9.2, affecting the management and dataplane interfaces. Unauthenticated attackers could execute arbitrary code as root on PA-Series hardware firewalls, while VM-Series faces denial-of-service impact and Prisma Access and Cloud NGFW have reduced, authenticated exposure. Affected releases include PAN-OS 10.2, 11.1, 11.2, 12.1, and 12.2 before fixed maintenance releases such as 12.2.3, 12.1.4-h10, 11.2.13-h2, 11.1.16-h2, and 10.2.18-h10; no workaround is available. Palo Alto is not aware of malicious exploitation but classifies remediation urgency as highest.

GBHackersupdated Sep 10, 12:10 UTC · 6d agofirst Sep 10, 11:39 UTC · 6d agoVulnerability 3 sources CVE-2026-0310

Windows BitLocker Flaw Lets Attackers Execute Code on Vulnerable Systems

Microsoft patched CVE-2026-69449, a heap-based buffer overflow in Windows BitLocker allowing privileged local attackers to execute code; no exploitation reported.

Microsoft disclosed CVE-2026-69449 on September 8, 2026, an Important-severity heap-based buffer overflow (CWE-122) in Windows BitLocker with a CVSS 3.1 base score of 6.7. The attack vector is local (AV:L) with high privileges required, so exploitation needs privileged local access rather than remote access over the internet. Microsoft, as assigned CNA, has not reported public exploitation, and administrators are urged to inventory BitLocker-enabled systems and apply updates. Interim mitigations include least-privilege access, limiting administrative rights, and monitoring for unexpected elevated process activity.

GBHackersSep 9, 10:28 UTC · 7d agoVulnerability CVE-2026-694491

Ivanti Patches 10 EPMM, Neurons for ITSM and Sentry Flaws Enabling RCE and Admin Access

Ivanti patches 10 flaws in EPMM, Neurons for ITSM, and Sentry, including two 9.8-rated unauthenticated RCEs in ITSM.

Ivanti released fixes for 10 vulnerabilities across Endpoint Manager Mobile, Neurons for ITSM, and Sentry, and said it was not aware of active exploitation at disclosure. The most severe are CVE-2026-12744 and CVE-2026-12745, unauthenticated deserialization RCEs rated 9.8 in Neurons for ITSM, alongside authenticated deserialization and missing-authorization RCEs rated up to 9.9. CVE-2026-18851 is an 8.8-rated EPMM privilege escalation to administrator, and CVE-2026-83527 is an 8.1-rated unauthenticated authentication bypass in Sentry granting administrative access. Ivanti said the ITSM weaknesses were found using large language models; Cloud/SaaS fixes shipped August 9, 2026, and on-premises patches are available from September 2026.

GBHackersSep 9, 06:34 UTC · 7d agoVulnerability CVE-2026-12744 CVE-2026-12745 CVE-2026-12651+7 CVEs

Nintendo Switch QR Code Vulnerability Lets Nearby Attackers Execute Unauthorized Code

Nintendo patched CVE-2026-82079 (CVSS 8.4), a stack buffer overflow in Switch local wireless pairing enabling nearby attackers to execute code.

Nintendo Switch system update 23.0.0 fixes CVE-2026-82079, a stack-based buffer overflow in local wireless networking abused via the QR code sharing process, including Album's 'Send to Smartphone' and Mario Kart Live pairing. A nearby attacker who scans the displayed QR code can send crafted traffic and use return-oriented programming to achieve arbitrary code execution. CVSS scores are 8.4 (v3.1) and 7.0 (v4.0), both rated High. No in-the-wild exploitation is reported and Switch 2 systems are not affected.

GBHackersSep 15, 06:19 UTC · 1d agoVulnerability 2 sources CVE-2026-82079

ASUS Control Center Critical Flaw Allows Unauthenticated Attackers to Gain Root Access

ASUS patched CVE-2026-19397 (CVSS 7.7) in Control Center Express Agent, letting unauthenticated nearby attackers with an active session take over the host.

ASUS released version 1.7.24 of Control Center Express Agent to fix CVE-2026-19397, a CWE-306 missing-authentication flaw scored 7.7 on CVSS v4. Exploitation requires an active login session on the target and nearby network access, and agent compromise could lead to complete device takeover where the agent runs with elevated privileges. ASUS also issued a same-day advisory for Armory Crate covering ten additional CVEs.

GBHackersSep 8, 10:37 UTC · 8d agoVulnerability CVE-2026-19397 CVE-2026-12962 CVE-2026-18023+8 CVEs