N-able 5th RCE Patch in 5 Weeks - Magento Zero-Day
N-able N-central gets its 5th max-severity RCE hotfix in 5 weeks. CVE-2026-75650 Magento zero-day drops Rust backdoors. 220M travel records exposed.
Posts
MikroTik SSH Hijack Chain Exploited in the Wild
MikroTik RouterOS SSH chain exploited since Sept 2. N-able N-central CVSS 10 RCE gets 4th hotfix. Adobe Commerce zero-day backdoors stores.
Chrome V8 Zero-Day CVE-2026-85046 - 6th of 2026
CVE-2026-85046 Chrome V8 type confusion exploited in the wild. Plus 12-year PostgreSQL backdoor CVE-2026-6471 and Cisco Nexus 9000 CVSS 9.8 RCE.
BGP Hijack Delivers Signed Malware - CVE-2026-83548
BGP hijack served trojanized Virtualizor updates with valid TLS certs. Plus SonicWall CVSS 10 zero-day chain and Teams vishing to domain takeover.
Post-Quantum Cryptography: 2/3 of Web Already Quantum-Safe
Two-thirds of web traffic is already post-quantum encrypted. Your browser did it without telling you. The migration got real. What you'll hear: • Your browser a
SonicWall SMA1000 Zero-Day Chain - CVE-2026-83548
CVE-2026-83548 CVSS 10 SonicWall SMA1000 chain exploited in the wild. BGP hijack poisons Virtualizor updates. 153M driver's licenses stolen.
Fire Ant Hijacks Cisco IOS XR Routers - CVE-2026-0768
Fire Ant APT targets Cisco IOS XR routers and TACACS+ servers. CVE-2026-0768 Langflow RCE and CVE-2026-82329 Artifactory bypass exploited in the wild.
Rails RCE KindaRails2Shell Exploited - Fire Ant Hits IOS XR
KindaRails2Shell Rails RCE actively exploited via file read chain. Fire Ant targets Cisco IOS XR and TACACS. Claude sessions hijacked by infostealers.
ServiceNow CVSS 10 Trio - RCE and SQLi in the Wild
Three CVSS 10.0 ServiceNow AI Platform flaws patched; ZBT routers ship with factory backdoors CVE-2026-74232; PaperCut zero-day exploited in the wild.
FBI Dismantles QTFY - Chinese Spy Proxy Hit the Fed
FBI takes down QTFY Chinese state proxy that breached Federal Reserve and DOJ. CVE-2026-8452 NetScaler exploited in the wild.