Search: “networking”

1,522 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 7680 Ransomware 7644 Malware 6818 Exploit / PoC 3853 Industry 3606 Data breach 3086 Policy & legal 2793 Threat actor 2619 Phishing & fraud 1862 AI tools & infra 520 Research 409 Advisory 400 AI safety & security 305 Tools 278

SeverityAll critical 16763 high 12241 medium 6328 low 5629 info 1389

Microsoft Patch Tuesday, September 2026 Security Update Review

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.

Qualys ThreatPROTECTSep 9, 12:23 UTC · 7d agoVulnerability in the wildCVE-2026-81963 CVE-2026-85880 CVE-2026-58599+27 CVEs

IoT: How I hacked my home

Kaspersky SecurelistAug 21, 10:55 UTC · Aug 21, 2014Vulnerability

Security policies: misuse of resources

Kaspersky SecurelistJul 10, 17:00 UTC · Jul 10, 2013Vulnerability

Zero Networks Access Orchestrator: Autonomous, airtight network access security at scale

Help Net SecurityFeb 21, 00:00 UTC · Feb 21, 2020Vulnerability

Application Control: the key to a secure network. Part 1

Kaspersky SecurelistFeb 19, 20:43 UTC · Feb 19, 2013Vulnerability

The Dangers of Social Networking

Kaspersky SecurelistApr 19, 12:44 UTC · Apr 19, 2010Vulnerability

HPE, Extreme Networks working to address five vulnerabilities in widely used network switches

The RecordJan 12, 00:00 UTC · Jan 12, 2023Vulnerability

2017 in Snort Rules

Cisco TalosJan 29, 19:37 UTC · Jan 29, 2018Vulnerability

Neutralization reaction

Kaspersky SecurelistAug 25, 09:45 UTC · Aug 25, 2017Vulnerability

Google disrupts proxy network used by 550+ threat groups

Help Net SecurityJan 29, 00:00 UTC · Jan 29, 2026Vulnerability

Operation TunnelSnake

Kaspersky SecurelistMay 6, 10:00 UTC · May 6, 2021Vulnerability

Who’s Really Spreading through the Bright Star?

Kaspersky SecurelistMar 4, 17:14 UTC · Mar 4, 2015Vulnerability

CVE-2021-28372: How a Vulnerability in Third-Party Technology Is Leaving Many IP Cameras and Surveillance Systems Vulnerable

Palo Alto Unit 42Jun 5, 23:26 UTC · Jun 5, 2024Vulnerability CVE-2021-28372

How to prevent/detect lateral movement in 5G networks via cloud systems

Security AffairsOct 29, 13:47 UTC · Oct 29, 2021Vulnerability

Cisco fixes RCE flaws in Webex Network Recording Player

Security AffairsSep 21, 06:53 UTC · Sep 21, 2018Vulnerability CVE-2018-15414 CVE-2018-15421 CVE-2018-15422

15 vulnerabilities discovered in Siemens industrial control management system

The RecordJan 13, 00:00 UTC · Jan 13, 2023Vulnerability CVE-2021-33723 CVE-2021-33722 CVE-2021-33727+1 CVEs

New LTE Network Flaw Could Let Attackers Impersonate 4G Mobile Users

The Hacker NewsFeb 28, 10:13 UTC · Feb 28, 2020Vulnerability

Internet of Things security issues bleed into 2018

Help Net SecurityJan 16, 00:00 UTC · Jan 16, 2018Vulnerability

Cloud Services: Holes in Corporate Network Security

Kaspersky SecurelistJul 9, 11:00 UTC · Jul 9, 2014Vulnerability CVE-2010-2568

SSH protects the world’s most sensitive networks. It just got a lot weaker

Ars Technica · SecurityDec 19, 17:35 UTC · Dec 19, 2023Vulnerability CVE-2023-48795 CVE-2023-46445 CVE-2023-46446

OPC UA security analysis

Kaspersky SecurelistMay 10, 10:00 UTC · May 10, 2018Vulnerability

CVE-2026-34908: UniFi OS Auth Bypass Vulnerability

Ubiquiti disclosed CVE-2026-34908, a CVSS 10.0 authentication bypass in UniFi OS letting network-adjacent attackers alter device configuration without credentials.

CVE-2026-34908 is an improper access control flaw (CWE-284) in Ubiquiti UniFi OS devices, disclosed in UI Security Advisory Bulletin 064, with a CVSS 3.1 base score of 10.0. An unauthenticated network-adjacent attacker can bypass access controls and modify system configuration, with scope-changed impact on downstream network services such as routing, VPN, and connected access points. Fixed firmware is available, and workarounds include restricting management ports to trusted subnets, isolating management interfaces on a dedicated VLAN, and disabling remote access features. No public proof-of-concept code was observed at the time of publication.

Web discovery (articles for new exploits & KEV entries)Sep 8, 21:57 UTC · 8d agoVulnerability CVE-2026-34908

CVE-2026-34486: Apache Tomcat Auth Bypass Vulnerability

SentinelOne details CVE-2026-34486, an Apache Tomcat EncryptInterceptor bypass exposing unencrypted cluster communications, with patches and workarounds available.

CVE-2026-34486 stems from an incomplete fix for CVE-2026-29146, letting network-positioned attackers bypass the EncryptInterceptor and read plaintext Tomcat cluster traffic, including session and application data between nodes. Affected versions 9.0.116, 10.1.53 and 11.0.20 are fixed in 9.0.117, 10.1.54 and 11.0.21. Workarounds include network-level encryption such as IPsec or VPN tunnels and isolating cluster communications to secured network segments.

Web discovery (articles for new exploits & KEV entries)Sep 8, 19:34 UTC · 8d agoVulnerability CVE-2026-34486 CVE-2026-291462