🚨 CRITICAL THREAT: Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE. CISA KEV updated. Patch immediately! #CyberSecurity #ZeroDay #CVE #PatchNow

🌐 cyber[.]netsecops[.]io

Update to 15.82 now. Five high-severity TeamViewer vulnerabilities include CVE-2026-92370, CVE-2026-19743 and CVE-2026-92368 in Full Client and Host.

#TeamViewer #RemoteAccess #CVE202692370 #PrivilegeEscalation #Windows #Linux #macOS #PatchNow

Five high-severity Electron vulnerabilities, including CVE-2026-102676, CVE-2026-102673 and CVE-2026-102674, weaken sandbox isolation. Update Electron now.

#Electron #ElectronJS #CVE2026102676 #AppSecurity #Sandbox #JavaScript #DesktopApps #PatchNow

HPE fixed 18 HPE Instant ON vulnerabilities in its access points, including CVSS 9.8 RCE flaws CVE-2026-76721 and CVE-2026-76722. Update to 3.4.2.0.

#HPE #InstantON #HPENetworking #CVE202676721 #WiFiSecurity #AccessPoint #RCE #PatchNow

WatchGuard patched 14 Fireware OS vulnerabilities, including CVSS 9.2 RCE flaw CVE-2026-86131 in BOVPN Over TLS. Update Firebox appliances now.

#WatchGuard #FirewareOS #Firebox #CVE202686131 #FirewallSecurity #VPN #NetworkSecurity #PatchNow

A CVSS 10.0 Podman vulnerability, CVE-2026-94603, lets container images disable sandboxing in podman run. Upgrade to Podman 6.1.3 or 5.8.8 now.

#Podman #PodmanVulnerability #CVE202694603 #ContainerSecurity #Linux #DevSecOps #SupplyChain #PatchNow

A JupyterLab Desktop vulnerability, CVE-2026-102530 (CVSS 9.4), turns a malicious server URL into remote code execution. Update to 4.6.2-1 now.

#JupyterLab #JupyterLabDesktop #CVE2026102530 #XSS #RCE #Electron #DataScience #PatchNow

Google's Chrome security update 154.0.8037.92 fixes 33 flaws, including critical ANGLE bug CVE-2026-102331 and six V8 issues. Update Chrome now.

#Chrome #GoogleChrome #ChromeSecurityUpdate #CVE2026102331 #V8 #BrowserSecurity #ANGLE #PatchNow

A critical MikroTik RouterOS vulnerability, CVE-2026-84411 (CVSS 9.8), lets unauthenticated attackers run code as root. Update RouterOS now.

#MikroTik #RouterOS #CVE202684411 #RCE #NetworkSecurity #CISA #RouterSecurity #PatchNow

OpenSSL patched 14 OpenSSL vulnerabilities, including high-severity DTLS flaw CVE-2026-84782 that can leak heap memory. Upgrade to 4.0.3 now.

#OpenSSL #OpenSSLVulnerabilities #CVE202684782 #DTLS #QUIC #TLS #Cryptography #PatchNow

Apple’s graphics engine flaw in iOS 26 is fixed. Update now if you haven’t moved to iOS 27. #Security #Apple #iOS26 #CVE202686950 #PatchNow #ZeroClick thedailytechfeed.com/urgent-secur...

⚠️ 7GB of eye care patient data. That's not a database leak, that's people's medical history.

https://www.yazoul.net/intel/claim/2026-09-23-smart-eye-care-ransomware-claim-by-booba-project-sep-2026/

by Yazoul AI #CyberSecurity #PatchNow

Details and a PoC are public for CVE-2026-84543, a macOS SMB kernel vulnerability that lets a malicious SMB server crash Macs. Update macOS now.

#macOS #Apple #CVE202684543 #SMB #KernelVulnerability #PoC #AppleSecurity #PatchNow

A High-severity Octopus Server vulnerability, CVE-2026-101169, lets users with edit rights run code via insecure deserialization. Upgrade now.

#OctopusDeploy #OctopusServer #CVE2026101169 #Deserialization #DevSecOps #CICD #RCE #PatchNow

CVE-2026-88771 is a Citrix NetScaler command injection exploited in the wild. Details and a PoC are public. Patch NetScaler to 14.1-73.37 now.

#Citrix #NetScaler #CVE202688771 #CommandInjection #ZeroDay #ExploitedInTheWild #PoC #PatchNow

Four Apache Karaf vulnerabilities, including CVE-2026-92142, let viewer and manager users reach admin or RCE. Upgrade to Karaf 4.4.12 now.

#ApacheKaraf #KarafVulnerabilities #Apache #PrivilegeEscalation #RCE #JMX #JavaSecurity #PatchNow

wolfSSL 5.9.4 patches 10 wolfSSL vulnerabilities, including TLS authentication bypass flaws CVE-2026-93302 and CVE-2026-89136. Upgrade now.

#wolfSSL #wolfSSLVulnerabilities #TLS #AuthenticationBypass #EmbeddedSecurity #Cryptography #IoTSecurity #PatchNow

Three critical LXD vulnerabilities, including CVE-2026-87799 (CVSS 9.9), let container users write files as root on the host. Patch to 5.21.8 or 6.10.

#LXD #LXDVulnerabilities #Canonical #ContainerSecurity #btrfs #PathTraversal #LinuxSecurity #PatchNow

LockBit5 just named a new target. The claim is unverified. The name isn't.

taspenlife.com is allegedly on the list.
No record count disclosed.

https://www.yazoul.net/intel/claim/2026-09-25-taspen-life-ransomware-claim-by-lockbit5-sep-2026/

by Yazoul AI #CyberSecurity #PatchNow

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now.

#Citrix #NetScaler #ZeroDay #RCE #PotatoSecurity #VPN #watchTowr #PatchNow