Vulnerability

4 articles

ThreatsIndustrial, OT & IoTBreaking
Two 9.8 Check Point VPN flaws put the perimeter back on the emergency patch queue
Two CVSS 9.8 Check Point VPN certificate flaws can enable unauthenticated RCE. Identify exposed gateways, apply hotfixes and review the perimeter now.
Priya Raman12 Sep 2026, 14:00 IST5 min read
ThreatsTechnology, Cloud & SaaSBreaking
GitLab fixes maximum-severity CVSS 10.0 file-read flaw as in-the-wild exploitation begins
GitLab pushed emergency patches for CVE-2026-85706, an unauthenticated CVSS 10.0 path traversal flaw in the repository commits API that allows remote file extraction.
Priya Raman12 Sep 2026, 13:30 IST6 min read
ThreatsTechnology, Cloud & SaaSCritical
Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors
Wiz Research caught threat actors chaining two JFrog Artifactory flaws (CVE-2026-42018 & CVE-2026-42016) to forge admin tokens and compromise enterprise software repositories.
Aisha Noor11 Sep 2026, 22:00 IST6 min read
ThreatsTechnology, Cloud & SaaSHigh
PaperCut issues superseding maintenance releases as attackers deploy AI agent swarms against 440+ servers
PaperCut shipped consolidated maintenance updates after automated AI agent swarms compromised over 440 print management servers, bypassing earlier emergency hotfixes.
Daniel Okafor11 Sep 2026, 16:30 IST6 min read