N-able 5th RCE Patch in 5 Weeks - Magento Zero-Day
N-able N-central gets its 5th max-severity RCE hotfix in 5 weeks. CVE-2026-75650 Magento zero-day drops Rust backdoors. 220M travel records exposed.
Posts tagged: Supply-Chain
MikroTik SSH Hijack Chain Exploited in the Wild
MikroTik RouterOS SSH chain exploited since Sept 2. N-able N-central CVSS 10 RCE gets 4th hotfix. Adobe Commerce zero-day backdoors stores.
N-able RMM CVSS 10 Exploited - Fourth Patch in 5 Weeks
N-able N-central CVSS 10.0 RCE exploited in the wild, fourth patch in five weeks. Citrix NetScaler auth bypass CVE-2026-19490 and JetBrains CI/CD breach.
39 Passkey Bypass Methods - FIDO2 Trust-Boundary Gaps
Token researchers map 39 passkey bypass methods exploiting enrollment and recovery flows. CrowdStrike Falcon zero-day PoC public.
BGP Hijack Delivers Signed Malware - CVE-2026-83548
BGP hijack served trojanized Virtualizor updates with valid TLS certs. Plus SonicWall CVSS 10 zero-day chain and Teams vishing to domain takeover.
SonicWall SMA1000 Zero-Day Chain - CVE-2026-83548
CVE-2026-83548 CVSS 10 SonicWall SMA1000 chain exploited in the wild. BGP hijack poisons Virtualizor updates. 153M driver's licenses stolen.
Fire Ant Hijacks Cisco IOS XR Routers - CVE-2026-0768
Fire Ant APT targets Cisco IOS XR routers and TACACS+ servers. CVE-2026-0768 Langflow RCE and CVE-2026-82329 Artifactory bypass exploited in the wild.
ServiceNow CVSS 10 Trio - RCE and SQLi in the Wild
Three CVSS 10.0 ServiceNow AI Platform flaws patched; ZBT routers ship with factory backdoors CVE-2026-74232; PaperCut zero-day exploited in the wild.
FBI Dismantles QTFY - Chinese Spy Proxy Hit the Fed
FBI takes down QTFY Chinese state proxy that breached Federal Reserve and DOJ. CVE-2026-8452 NetScaler exploited in the wild.
Entra ID CVSS 10 RCE Exploited - CVE-2026-69836
CVE-2026-69836 Entra ID max-severity RCE exploited in the wild. AI-generated PLC exploits hit US infrastructure. NetScaler auth bypass patched.