3+ day, 2+ hour ago   (248+ words) The attackers built their intrusion around Redis’s master-replica replication system, a feature meant to let one server mirror the data of another for backup or scaling purposes. According to Hunters.io, once the operators confirmed a target server had no…...

3+ day, 6+ hour ago   (442+ words) The vulnerability carries a CVSSv3 score of 7.3 and stems from a certificate validation weakness classified as CWE-295. In practice, this means the ZTNA portal’s connection to the destination website does not properly check whether the certificate presented actually belongs to that…...

3+ day, 12+ hour ago   (484+ words) kobaran.com...

4+ day, 10+ hour ago   (214+ words) The core problem is straightforward. A function inside the Control Center Express Agent that should require identity verification does not enforce one. That gap means the barrier to entry for an attacker is proximity and an active session on the…...

4+ day, 10+ hour ago   (643+ words) kobaran.com...

2+ week, 3+ day ago   (401+ words) Ubiquiti has shipped patches for three maximum-severity security flaws, including CVE-2026-77537, a bug in its UniFi Protect video surveillance platform that carries a perfect 10.0 CVSS score. An unauthenticated attacker with network access can exploit the flaw without any user interaction,…...

2+ week, 6+ day ago   (595+ words) CVE-2025-62593 is a critical remote code execution vulnerability affecting Ray, the open source distributed computing engine maintained by Anyscale and used to scale Python and machine learning workloads across clusters of CPUs and GPUs. The flaw carries a CVSS score…...

3+ week, 2+ day ago   (206+ words) The campaign did not depend on a single exploit. Researchers identified three parallel intrusion methods working together, each targeting a different weakness in how Dahua devices handle remote access. Once attackers gained administrative access through the bypass, Hunt.io found…...

3+ week, 2+ day ago   (418+ words) The timing matters. Network operators rely on Crosswork to orchestrate traffic across sprawling, often mission-critical networks, which means a vulnerability rated 10 out of 10 there is not a routine patch-Tuesday item. It is the kind of disclosure that security teams are…...

3+ week, 2+ day ago   (661+ words) Enterprise security teams have a new fire drill on their hands. Cloud Software Group, the company behind Citrix’s NetScaler product line, has confirmed a critical authentication bypass flaw that lets remote attackers walk past login screens on internet-facing gateways without…...