Qlik Sense servers hit with blocked reverse-shell attempts
Cynet blocked the October attempts; the operator’s server also staged ActiveMQ and Veeam exploit tooling.
Stories per day · 30 days
2 RSS
Relatedbackup7authorization-bypass2privilege-escalation2ransomware2rubrik2veritas2activemq1adobe1ahsaycbs1amd-epyc1backup-and-replication1buyer-guide1cactus1cdp1cleanroom1code-execution1cohesity1coveware1
21 stories, newest first · one card per story
Stories tagged #veeam
Veeam warns critical Linux kernel flaw could crash backup appliances
Veeam identifies use-after-free in Linux kernel affecting backup appliances; patched kernel available for 13.1 versions.
Attackers exploit patched AhsayCBS flaws to plant a Python backdoor
Huntress says the October chain was used as zero-days to drop web shells, two XMRig miners, and tunneling tools.
Buyer's guide ranks 12 DFIR firms; Coveware now under Veeam
The guide matches firms to breach lanes and flags Coveware's acquisition by Veeam as a procurement issue.
1
Adobe, Veeam and Juniper patch critical code-execution flaws
None of the vendors reports exploitation; fixes cover cross-tenant code execution in Veeam and unauthenticated command execution in Session Smart.
Veeam backup products affected by vulnerabilities ahead of fixes
The Canadian Cyber Centre lists affected builds of Agent for Linux, Backup and Replication, Backup for Microsoft 365 and Veeam ONE.
Veeam patches critical Backup & Replication authorization bypass
Unauthenticated attackers can bypass CDP Coordinator checks; fixed builds are 13.1.2.57 and 13.0.3.63, with no exploitation reported.
Veeam patches critical unauthenticated authorization bypass in Backup & Replication
CVE-2026-108142 hits 13.0 and 13.1 branches; fixes are 13.0.3.63 and 13.1.2.57, and 12.x is unaffected.
4
Rubrik, Veeam and Zerto top 2026 ransomware recovery ranking
Editorial scores, not lab tests, put Rubrik at 9.1, Veeam at 8.9 and HPE Zerto at 8.7.
1
2026 ranking scores nine backup and recovery platforms
Veeam leads at 9.1, Rubrik at 8.9 and merged Cohesity-Veritas at 8.7; scores are editorial, not lab tests.
2026 Backup Recovery Buyer’s Guide Verdict
The guide evaluates eleven backup solutions on immutability, ransomware detection and verified restore speed, noting Cohesity-Veritas merger.
1
Ransomware groups exploit PAN-OS flaw CVE-2026-0257 to bypass MFA
Unit 42 says the GlobalProtect cookie bug yielded VPN access and later ransomware across several sectors since early June 2026.
2
12th October – Threat Intelligence Report
Check Point's weekly report covers a Denmark registry breach of 8.8 million people, ransomware, and exploited enterprise flaws.
14
Critical Veeam Backup & Replication Flaw Allows Low-Privileged Users to Execute Remote Code
Veeam fixed a critical Backup & Replication flaw letting Backup Viewer users run remote code.
Zero Trust for AI Agents Starts With Fixing Zero Visibility
Guidance says AI-agent Zero Trust needs inventory first, citing shadow agents and a $600,000 METR token theft.
4
Veeam Agent Flaw Actively Exploited to Gain SYSTEM Privileges on Windows
Public PoC for CVE-2026-32996 lets local users escalate to SYSTEM through Veeam Agent for Windows.
1
Hackers Exploit Veeam Agent Vulnerability to Gain SYSTEM-Level Access on Windows
Public PoC for CVE-2026-32996 lets local users escalate to SYSTEM on vulnerable Veeam Agent for Windows.
2
Public PoC Exposes Critical Veeam Agent Privilege Escalation
Public PoC for CVE-2026-32996 lets low-privileged local users gain SYSTEM on Veeam Agent for Windows; patch to 13.0.2.29 or later.
4
Veeam security advisory (AV26-513) – Update 1
Canada's Cyber Centre warns CVE-2026-32996 is being exploited and urges Veeam updates.
4
Veeam Released Patches for Critical Vulnerability (CVE-2026-65641)
Veeam patched critical CVE-2026-65641 (CVSS 9.3) in Veeam ONE, exploitable by unauthenticated network attackers to coerce SMB authentication from the service account.
Veeam security advisory (AV26-855)
Canada's Cyber Centre advisory AV26-855 says Veeam Backup & Replication and Veeam ONE vulnerabilities are resolved in 13.0.3 and 13.1 updates.