CISA warns the Viidure dashcam app leaks hardcoded cloud credentials (CVE-2026-96587) and public storage (CVE-2026-94204). The vendor has not responded.

#Viidure #Dashcam #CISA #CVE202696587 #HardcodedCredentials #CloudSecurity #AndroidSecurity #IoTSecurity

Is this what you get when you lay off/fire experts at #CISA? There needs to be Congressional investigations!

cc @captmarkkelly.bsky.social @maddow.bsky.social @gallego.senate.gov @schiff.senate.gov @booker.senate.gov @raskin.house.gov @duckworth.senate.gov @slotkin.senate.gov
#Military #Veterans

Attackers exploited Zimbra CVE-2026-73570 via crafted SMTP requests to drop web shells, steal mailbox and auth data, and move laterally using tools like Zimclient2 and AzCopy. #Zimbra #CVE-2026-73570 #CISA

CISA flagged CVE-2026-84411 in MikroTik RouterOS: a critical pre-auth integer underflow that may let one crafted request run code as root or cause a denial of service. #MikroTik #RouterOS #CISA

DOD released a Sept 22 memo from Sec. Pete Hegseth, directing the U.S. Cyber Command to combat foreign interference in the Nov. election. Such protections were formerly conducted by CISA, gutted by the administration in 2025. tinyurl.com/3z2rdrkk #News #DOD #CISA #Cybersecurity #2026Midterms

WaterISAC says aging water systems, exposed OT/PLCs, and weak integrator access are widening attack paths, especially for small utilities with poor password and MFA hygiene. #WaterISAC #CISA #Russia

CISA Adds One Known Exploited Vulnerability to Catalog（CISA、悪用確認済み脆弱性カタログに1件追加） #CISA （Sep 29）
www.cisa.gov/news-events/...

#Hegseth #election #CISA

A critical MikroTik RouterOS vulnerability, CVE-2026-84411 (CVSS 9.8), lets unauthenticated attackers run code as root. Update RouterOS now.

#MikroTik #RouterOS #CVE202684411 #RCE #NetworkSecurity #CISA #RouterSecurity #PatchNow

CISA warns of 10 Toptech TMS7 vulnerabilities, including CVSS 10.0 flaw CVE-2026-71379 that exposes database tables. Upgrade TMS7 to 7.8 now.

#Toptech #TMS7 #TopHAT #ICSSecurity #CISA #CVE202671379 #CriticalInfrastructure #OTSecurity

#CISA orders feds to patch exploited #Citrix flaws by Wednesday

https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-exploited-citrix-flaws-by-wednesday/

#cybersecurity

Citrix NetScaler: 2 unauthenticated RCE zero-days (CVSS 9.5), exploited before a patch existed. Default config affected. CISA KEV deadline Wed Sep 30. Patch to 14.1-73.37 / 13.1-64.23 now.🇬🇧 diesec.com/2026/09/citr...
🇩🇪 diesec.com/de/2026/09/c...
#CyberSecurity #CISA #Citrix

Citrix confirmed active exploitation of two NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, after nearly two days of unofficial warnings. The flaws can enable remote code execution. #Citrix #NetScaler #CISA

The bill would establish an AI cyber‑defense pilot program under the Cybersecurity and Infrastructure Security Agency to help private sector entities better identify and mitigate AI‑driven cyber threats. #AI #CISA #cyberdefense #pilotprogram #cy https://www.govinfo.gov/app/details/BILLS-119hr10519ih

Unpatched Citrix NetScaler gateways face active zero-day RCE exploitation under CVE-2026-88771 and CVE-2026-88772, triggering emergency CISA KEV deadlines while ShinyHunters and cloud wipers breach perimeters.

Full Report: inferlume.com/reports/dail...

#NetScaler #ZeroDay #ThreatIntel #CISA #SOC

CISA adds critically exploited vulnerabilities in SharePoint, WSO2, Adobe Commerce, and MikroTik to its KEV catalog, demanding immediate patching.

#CISA #ZeroDay #CyberSecurity #MicrosoftSharePoint #TechNews

The MikroTrick and SharePoint Crisis: Analyzing CISA's Latest KEV Warnings

Analysis of the recent CISA KEV additions including the MikroTrick RouterOS chain and SharePoint RCE, exploring the role of AI in vulnerability discovery.

#CISA #Microsoft

Read more →

📰 CISA Perintahkan Pemerintah AS Menambal Dua Celah Kritis Citrix NetScaler Sebelum 30 September

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/28/cisa-patch-celah-citrix-netscaler-cve-2026-88771-88772/

#cisa #citrix #cve #cyberSecurity #cybersecurity #keamananSiber #netscaler

Monday's fuck up - This Time great Citrix -  U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

securityaffairs.com/199891/hacki... #redteam #citrix #real #attack #cisa #exploit #0day #critical

CISA added two Citrix NetScaler flaws to its KEV Catalog after active zero-day exploitation. The bugs can enable unauthenticated remote code execution. #Citrix #NetScaler #CISA