2+ day, 10+ hour ago   (19+ words) TORchIM Desktop v0.1.4.161 Alpha is out. This security-focused release updates bundled C-Tor to... Tagged with torchim, tor, p2p, cybersecurity....

2+ day, 12+ hour ago   (603+ words) JFrog Artifactory instances continue to get hit hard. Multiple attackers are exploiting three JFrog Artifactory bugs to gain administrative control over vulnerable instances - in some cases, just days after the vendor published a patch - and then using this illicit access…...

3+ day, 13+ hour ago   (1518+ words) Tools that help engineering teams move from vulnerable-component detection to safe, reviewable and scalable remediation. Aikido Libraries is the strongest choice when teams cannot safely move to the upstream fixed version and need a minimal backported patch for the version…...

3+ day, 20+ hour ago   (130+ words) oodaloop.com Informing your decisions with actionable intelligence Home > Briefs > Cyber > Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks Fortinet RCE flaw exploited to deploy PivotC2 backdoor. Attackers are abusing a heap‑based buffer overflow in FortiOS and FortiSwitchManager to install…...

4+ day, 5+ hour ago   (442+ words) The vulnerability carries a CVSSv3 score of 7.3 and stems from a certificate validation weakness classified as CWE-295. In practice, this means the ZTNA portal’s connection to the destination website does not properly check whether the certificate presented actually belongs to that…...

4+ day, 7+ hour ago   (64+ words) TYPE: Operating Systems - Networks OS Multiple vulnerabilities were identified in Citrix Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and security restriction bypass on the targeted system. Before installation of the software,…...

4+ day, 19+ hour ago   (429+ words) The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic. Fortinet on Tuesday released patches for 10 vulnerabilities across its products, including critical security defects. The first critical bug, tracked as CVE-2026-84390 (CVSS score of 9.6), is…...

4+ day, 23+ hour ago   (489+ words) Industrial giants Schneider Electric, Siemens, and Aveva have published September 2026 Patch Tuesday advisories, informing customers about vulnerabilities found in their ICS products. Schneider Electric published four new security advisories and updated four others, including one originally released in 2019. The most…...

4+ day, 23+ hour ago   (410+ words) Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches for authentication bypass flaws. Ivanti on Tuesday announced security updates that address vulnerabilities rated critical and high severity in its Neurons for…...

5+ day, 3+ hour ago   (409+ words) Fortinet has disclosed a critical vulnerability involving improper access control in the FortiSandbox web interfaces. This issue could allow an unauthenticated remote attacker to access sensitive information by sending specially crafted HTTP requests. The vulnerability is tracked as CVE-2026-26084 and…...