Under Attack?
Critical Check Point VPN Remote Code Execution Vulnerability
Check Point has disclosed a critical vulnerability affecting Remote Access VPN and Site-to-Site VPN deployments that could allow an unauthenticated attacker to achieve...
.png)
Cisco Secure Firewall Management Center Authentication Bypass Vulnerability Under Active Exploitation
Cisco has confirmed active exploitation of CVE-2026-20079, a critical authentication bypass vulnerability affecting Cisco Secure Firewall Management Center (FMC)...
.png)
Critical Check Point VPN Certificate Vulnerabilities Enable Unauthenticated Remote Code Execution
Check Point has disclosed and patched two critical vulnerabilities affecting its VPN certificate processing mechanisms. Both vulnerabilities are rated CVSS 9.8...
Security Advisory: CVE-2026-76969 – SAP CAP Unauthenticated Credential Disclosure and Tenant Data Manipulation
A critical vulnerability, CVE-2026-76969, has been identified in the SAP Cloud Application Programming Model (CAP). The vulnerability affects the @sap/cds-mtxs library...
Active Exploitation of SonicWall SMA1000 Zero-Day Vulnerabilities
SonicWall has released emergency security updates for two vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series appliances after confirming evidence of...
.jpg)
Citrix NetScaler Authentication Bypass and DoS vulnerabilities require immediate patching
Citrix has issued an urgent advisory warning customers to patch two newly disclosed vulnerabilities affecting NetScaler ADC and NetScaler Gateway appliances. The most severe vulnerability, CVE-2026-19490, enables unauthenticated authentication bypass under specific configurations, potentially allowing remote attackers to gain unauthorized access to exposed services. A second vulnerability, CVE-2026-19489, could enable unauthenticated attackers to trigger denial-of-service (DoS) conditions.
-1.png)
SAP Commerce Cloud CVE-2026-58231 targeted in exploitation attempts
A maximum-severity vulnerability affecting SAP Commerce Cloud, tracked as CVE-2026-58231, is being targeted in exploitation attempts only days after SAP released a security update.
Ceva Logistics: Cyber incident affecting operations
CEVA Logistics, a global logistics and supply chain provider and subsidiary of CMA CGM Group, has disclosed a cyber incident impacting portions of its European contract logistics operations. The attack, which reportedly began on or around 29 July 2026, disrupted operations across at least eight European warehouses and resulted in shipment delays for multiple customers.
TeamPCP Supply Chain Attack: Affected Organisations Disclosed
Digital Risk solutions provider CloudSek has published a list of organisations affected by a high profile campaign by TeamPCP.
Cisco Releases Patches for critical vulnerabilities in SD-WAN, IOS XE, and Secure Firewall Management Center (FMC)
Cisco has released security updates addressing 24 vulnerabilities across multiple enterprise products, including several critical-severity flaws affecting Catalyst SD-WAN, IOS XE, and Secure Firewall Management Center (FMC). The most severe vulnerability, CVE-2026-20079, impacts FMC and carries a CVSS score of 10.0, enabling unauthenticated remote attackers to bypass authentication and gain root-level access. Cisco has also disclosed critical flaws in IOS XE and Catalyst SD-WAN that could allow command injection, privilege escalation, and unauthorized access.
