CISA warns of 17 AD attack techniques—Kerberoasting, Golden Ticket, Shadow Credentials key threats. #IdentitySecurity #ADDefense #Kerberos #CertificateSecurity #ZeroTrust #CISA thedailytechfeed.com/cisa-exposes...

CISA says ransomware gangs are exploiting VMware vCenter CVE-2026-59310, a critical directory traversal flaw patched by Broadcom in July. QUIRSO found 361+ compromised IPs across 47 countries. #VMware #CISA #France

Minutes from the CVE Board teleconference meeting on August 19 are now available

mail-archive.com/cve-editoria...

#cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity

Imagine gaining root access just by hosting a website on a shared server. A flaw in LiteSpeed Enterprise lets one account compromise the entire system. This is how shared hosting fails. #CISA sugataai.com/blog/litespe...

Cisco patched CVE-2026-76461, a critical zero-day in Secure Email Gateway actively exploited to run root commands without auth. CISA added it to KEV, and Cisco disclosed more critical flaws. #Cisco #CISA #KEV

Cisco Secure Email Gateway flaw CVE-2026-76461 is being actively exploited, letting unauthenticated attackers run root commands via crafted email. CISA added it to KEV. #Cisco #CISA #Fortinet

A Better Way to Remember Your Master Password

I have to own a mistake. My AI agent flagged that my previous advice for creating a secure master password—wasn't actually recommended by the security agency CISA.

marclar.tech/blog/better-...

#passwords #security #memorization #cisa

CISA says attackers are exploiting a max-severity GitLab flaw, CVE-2026-85706, that can expose credentials and secrets. GitLab has released fixes in CE and EE. #GitLab #CISA #watchTowr

CISA Adds One Known Exploited Vulnerability to Catalog（CISA、悪用が確認された脆弱性1件をKEVカタログに追加） #CISA （Sep 11）

www.cisa.gov/news-events/...

CISA Adds Three Known Exploited Vulnerabilities to Catalog（CISA、悪用が確認された3件の脆弱性をKEVカタログに追加） #CISA （Sep 11）

CVE-2026-85706 GitLab Community EditionおよびEnterprise Editionにおけるパス・トラバーサル脆弱性

www.cisa.gov/news-events/...

CISA Adds Three Known Exploited Vulnerabilities to Catalog（CISA、悪用が確認された3件の脆弱性をKEVカタログに追加） #CISA （Sep 11）

CVE-2026-42016 JFrog Artifactoryにおける認証エラーの脆弱性
CVE-2026-42018 JFrog Artifactoryの認証エラーの脆弱性
CVE-2026-84869 ConnectWise ScreenConnectにおける不適切な権限管理と認証の欠落の脆弱性

www.cisa.gov/news-events/...

GitLab's Worst-Rated Vulnerability Is Already Being Exploited #API #CISA #CodeInjectionVulnerability

iT4iNT SERVER CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV VDS VPS Cloud #Cybersecurity #Vulnerabilities #CISA #InformationSecurity #DataProtection

A key US cybersecurity law, the Cybersecurity Information Sharing Act of 2015, is set to expire in Dec 2026. Congress must decide whether to renew the act, which is crucial for public-private threat intel sharing. #Cybersecurity #Policy #CISA

🌐 cyber[.]netsecops[.]io

CVE-2026-90444 - malcolm
Malcolm’s file‑transfer feature accepts any filename from an authenticated user and later builds a system command using that name without filtering special characters. This lets the…

Too many irrelevant or confusing CVEs? Use stackflag.com

#malcolm #cisa #CVE #infosec

GitLab Critical Path Traversal: Analyzing the Impact of CVE-2026-85706

A deep dive into the critical CVE-2026-85706 GitLab vulnerability, its active exploitation by attackers, and essential remediation steps for self-managed instan

#CISA #GitLab

Read more →

Chain of Thought in vendita: Alibaba, Moonshot e DeepSeek hanno prosciugato Claude per addestrare Qwen e Kimi
il blog: insicurezzadigitale.com/chain-of-tho...

#cybersecurity #cina #cisa #claude #cyberspionaggio #cyberwar #fbi #intelligenzaartificiale #nsa

#CERN #CISA

CVE-2026-90456 - malcolm
The example configuration file that comes with Malcolm’s inventory management component contains a fixed, publicly known admin password. If you copy that file into your live setup…

Too many irrelevant or confusing CVEs? Use stackflag.com

#malcolm #cisa #CVE #infosec

GitLab rushed emergency patches for 2 critical flaws. CVE-2026-85706 can let unauthenticated attackers read files, while CVE-2026-87719 may expose settings and passwords. #GitLab #CVE202685706 #CISA