Search: “HPE”

54 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Industry 56 Vulnerability 48 Ransomware 30 Data breach 19 Exploit / PoC 17 Policy & legal 12 Malware 12 Threat actor 11 AI tools & infra 9 Advisory 6 AI industry 6 Phishing & fraud 4 Tools 3 AI safety & security 3

SeverityAll critical 101 high 54 medium 17 low 49 info 16

Critical HPE Vulnerabilities Allow Remote Attackers to Achieve Complete System Compromise

HPE patched critical EdgeConnect SD-WAN flaws, including CVSS 9.8 unauthenticated API bypass and gateway RCE, enabling full system compromise.

HPE Security Bulletin HPESBNW05135 covers critical flaws in EdgeConnect SD-WAN Orchestrator and Gateways: CVE-2026-76669 and CVE-2026-76670 (CVSS 9.9 authorization bypass/privilege escalation), CVE-2026-76672 (CVSS 9.9, leaks third-party API tokens and credentials), CVE-2026-76673 (CVSS 9.8, unauthenticated Orchestrator API authentication bypass granting administrative privileges), and CVE-2026-76674 (CVSS 9.8, unauthenticated buffer overflow enabling arbitrary code execution on gateways). Fixes are available in ECOS 9.7.1.0/9.6.4.0/9.5.9.0/9.4.9.0 and Orchestrator 9.7.1/9.6.4/9.5.9/9.4.11 or later. HPE reported no public exploit code or active exploitation at publication and recommends isolating management interfaces on a dedicated VLAN.

Cyber Security News13:14 UTC · 7h agoVulnerability CVE-2026-76669 CVE-2026-76670 CVE-2026-76672+2 CVEs

HPE is notifying individuals affected by a December 2023 attack

Security AffairsFeb 10, 21:03 UTC · Feb 10, 2025Data breach

HPE is investigating claims of a new security breach

Security AffairsFeb 6, 07:59 UTC · Feb 6, 2024Data breach

HPE allowed Russians review code of ArcSight software also used by the Pentagon

Security AffairsOct 8, 17:03 UTC · Oct 8, 2017Vulnerability

Russia-linked APT group Midnight Blizzard hacked HPE

Security AffairsJan 25, 08:20 UTC · Jan 25, 2024Threat actor

HPE is investigating IntelBroker's claims of the company hack

Security AffairsJan 20, 22:46 UTC · Jan 20, 2025Data breach

HPE Launches Investigation After Hacker Claims Data Breach

Infosecurity MagazineJan 20, 16:40 UTC · Jan 20, 2025Data breach

HPE wars customers of Sudo flaw in Aruba AirWave Management Platform

Security AffairsAug 31, 14:48 UTC · Aug 31, 2021Vulnerability CVE-2021-3156

CVE-2026-73749: HPE ArubaOS-CX RCE

HPE patched CVE-2026-73749, a critical unauthenticated remote code execution flaw in ArubaOS-CX network switch software; affected devices need prompt updates.

HPE released patches for CVE-2026-73749, a critical unauthenticated remote code execution vulnerability in HPE Aruba Networking AOS-CX switch operating system. Published details are limited, but the flaw allows unauthenticated attackers to execute code on affected AOS-CX devices. Administrators running ArubaOS-CX should prioritize applying HPE's update.

SOCRadarSep 4, 14:36 UTC · 12d agoVulnerability CVE-2026-73749

HPE fixed multiple flaws in its StoreOnce software

Security AffairsJun 4, 13:29 UTC · Jun 4, 2025Vulnerability CVE-2025-37089 CVE-2025-37090 CVE-2025-37091+5 CVEs

A flaw in HP Remote Management hardware Integrated Lights

Security AffairsMar 3, 11:24 UTC · Mar 3, 2018Vulnerability CVE-2017-8987

Russian hackers breached Microsoft, HPE corporate maliboxes

Help Net SecurityFeb 15, 11:53 UTC · Feb 15, 2024Data breach

HPE, Extreme Networks working to address five vulnerabilities in widely used network switches

The RecordJan 12, 00:00 UTC · Jan 12, 2023Vulnerability

Tech Giant HP Enterprise Hacked by Russian Hackers Linked to DNC Breach

The Hacker NewsJan 26, 04:31 UTC · Jan 26, 2024Data breach

Catalogic Software adds direct offload to cloud from storage arrays to its ECX CDM solution

Help Net SecurityOct 28, 00:00 UTC · Oct 28, 2020Ransomware

Midnight Blizzard APT is targeting orgs worldwide, Microsoft warns

Security AffairsJan 26, 13:59 UTC · Jan 26, 2024Threat actor

Microsoft Provides Defense Guidance After Nation

Infosecurity MagazineJan 29, 12:10 UTC · Jan 29, 2024Threat actor

Cloud hosting provider Swiss Cloud suffered a ransomware attack

Security AffairsMay 2, 08:07 UTC · May 2, 2021Ransomware

C2 With It All: From Ransomware To Carding

Cisco TalosNov 4, 16:03 UTC · Nov 4, 2019Ransomware

Risky Bulletin: Russia tells data centers to deploy drone defenses

Russia ordered data center operators to deploy drone strike defenses under a Putin decree allowing temporary state takeover of unprotected critical infrastructure.

The Russian government instructed data center operators to deploy protections against drone strikes under a presidential decree signed by Putin that allows temporary state administration of critical infrastructure operators failing to defend against Ukrainian hacks and drone strikes. Although data centers are not formally critical infrastructure in Russia, the decree applies to them because other sectors depend heavily on cloud services; Russia has more than 180 data centers, over 80% in the European region within range of Ukrainian strikes. The digest also reports a Dropbox breach affecting nearly 5,000 accounts via the Lenovo ID integration, spyware attacks on at least 14 Serbians using NoviSpy or Pegasus, and a password recovery attack targeting hundreds of thousands of X accounts tied to the new X Money service. Other items include a 14-hour compromise of Coder's Cloudflare infrastructure delivering malicious Terraform modules, donor data breaches at Davayte and You Are Not Alone via the Stripe/WooCommerce integration, a $2.5M Aquifer crypto heist, and a TVING breach exposing data of almost 40 million accounts.