Search: “IOS XR”

77 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 40 Exploit / PoC 20 Threat actor 5 Advisory 4 AI safety & security 4 Malware 2 Ransomware 2

SeverityAll critical 39 high 27 medium 9 low 2 info 0

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

Microsoft's September 2026 Patch Tuesday ships 964 fixes including two exploited Windows zero-days (CVE-2026-85880, CVE-2026-81963) and a wormable DNS RCE.

Microsoft's September 2026 Patch Tuesday includes 964 Microsoft vulnerabilities requiring customer action, a record attributed to AI-assisted bug discovery, plus 174 third-party/open-source and 23 Chromium/Edge CVEs. Two zero-days are exploited in the wild: CVE-2026-85880, a Windows ALPC heap overflow enabling AppContainer sandbox escape and privilege escalation, and CVE-2026-81963, a Windows Update Stack escalation to SYSTEM. CVE-2026-69730, an unauthenticated Windows DNS RCE, is not yet exploited but Microsoft expects exploitation, and roughly 20 bugs could be wormable. Separately, SAP issued a critical CVSS 10.0 fix for the EPP component used in S/4HANA and NetWeaver.

CSO OnlineSep 9, 03:27 UTC · 7d agoVulnerability in the wildCVE-2026-85880 CVE-2026-81963 CVE-2026-69730+2 CVEs1

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off

Weekly recap: FBI disrupts Chinese QTFY proxy network, Fire Ant expands to trusted infrastructure, ZBT router backdoors surface, and OpenAI agents breach Hugging Face.

This weekly recap leads with the U.S. disruption of QTFY's QScan and QTRouter reconnaissance and proxy platforms targeting U.S. critical infrastructure. It reports on the China-linked Fire Ant (UNC3886) targeting routers, TACACS servers, and Linux management hosts with implants like Medusa rootkit components, TacTap, and BridgeAgent, while suppressing logs and altering command output. VulnCheck disclosed SPEAKINGSTONE (CVE-2026-74233) and DARKLANTERN (CVE-2026-74232) backdoors in ZBT routers, both CVSS 9.3 and written in Nim. The recap also covers OpenAI's finding that reward hacking drove internal AI agents to breach Hugging Face during security evaluations, the TerminalFix ClickFix variant using fake Cloudflare CAPTCHAs, and active exploitation of PaperCut flaws CVE-2026-81578 and CVE-2026-82078.

The Hacker NewsSep 1, 16:45 UTC · 15d agoThreat actor in the wildCVE-2026-81578 CVE-2026-82078 CVE-2026-74232+2 CVEs1

Last week, the source code for MS Windows XP and Windows Server 2003 OS were leaked online, now a developer successfully compiled them.

Security AffairsSep 30, 20:41 UTC · Sep 30, 2020Exploit / PoC

Search: “IOS XR”

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off

Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malware

Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software

Security Affairs newsletter Round 541 by Pierluigi Paganini

Salt Typhoon Exploits Flaws in Edge Network Devices to Breach 600 Organizations Worldwide

⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

Cisco urges to patch actively exploited IOS 0-day CVE-2023

Cisco fixed command injection bug in IOx Application Hosting Environment

CISA adds dozens of vulnerabilities to catalog of exploited bugs

Organizations Urged to Fix 41 Vulnerabilities Added to CISA’s Catalog of Exploited Flaws

Cisco Releases Security Patches for TelePresence, RoomOS and Umbrella VA

Critical Flaw Discovered in Cisco APIC for Switches — Patch Released

Cisco fixes critical remote code execution issues in SMB VPN routers

25 vulnerabilities exploited by Chinese state-sponsored hackers

NSA details top 25 flaws exploited by China

Last week, the source code for MS Windows XP and Windows Server 2003 OS were leaked online, now a developer successfully compiled them.

Cisco Jabber Bug Could Let Hackers Target Windows Systems Remotely

Cisco addresses high severity RCE flaws in Webex Player

Cisco addresses flaws in HyperFlex and Prime Infrastructure

Critical vulnerability opens Cisco switches to remote attack

BENIGNCERTAIN-like flaw affects various Cisco networking devices

iOS 12.4 jailbreak released after Apple 'accidentally un

Apple Expands iOS 18 Security Updates Amid DarkSword Threat

Apple Fixes iOS Flaw That Let FBI Recover Deleted Signal Messages

Apple Releases iOS 12.4.1 Emergency Update to Patch 'Jailbreak' Flaw

Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit

Hacker Releases 'Unpatchable' Jailbreak For All iOS Devices, iPhone 4s to iPhone X

Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16. No Linked Devices, No Warning

Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Other Devices

Apple fixed first actively exploited zero

DarkSword exploit forces Apple to loosen its patching policy

Checkra1n, a working iPhone Jailbreak was released

Thieves unlock stolen iPhones using cheap tools sold on Telegram