Cisco disclosed three critical NX-OS vulnerabilities affecting Nexus 3000 and 9000 switches. All three flaws score CVSS 9.8 and enable unauthenticated remote attackers to execute code with root privileges through the NGOAM feature. Patches available now.
CVE-2025-64393 affects Veeam Backup & Replication with CVSS 9.4 severity. Low-privileged Backup Viewer accounts can execute arbitrary code through insecure deserialization. Immediate patching required to protect backup infrastructure from compromise.
Security researchers exploited Samsung Galaxy S26 devices three additional times at Pwn2Own Ireland 2026, contributing to 45 zero-day vulnerabilities discovered. The $232,500 bounty payout highlights critical security gaps requiring immediate SOC attention and patch preparation.
Cybercriminals registered teams-online[.]com with an exact Microsoft Teams login replica to steal corporate credentials. The sophisticated phishing campaign targets remote workers through pixel-perfect interface cloning. Organizations must enforce MFA and alert users immediately.
CVE-2026-21589 affects Atlassian Data Center products, allowing authenticated users to read arbitrary files including credentials and configuration data. Organizations running self-hosted Confluence, Jira, or Bitbucket must apply patches immediately to prevent data exposure.
A suspected ShinyHunters cybercrime group member detained in Jordan is cooperating with FBI investigators to identify other members. ShinyHunters has breached over 60 organizations, compromising data from more than 1 billion individuals through sophisticated data theft.
Dell patches two critical 10.0 CVSS vulnerabilities in Container Storage Modules affecting Kubernetes integration. CVE-2025-21121 and CVE-2025-21122 enable authentication bypass and privilege escalation. Immediate patching required for CSM Authorization, Replication, and Observability modules.
Cisco Catalyst SD-WAN Manager CVE-2026-76504 is a critical authentication bypass vulnerability (CVSS 9.8) actively exploited in the wild. The flaw allows unauthenticated remote attackers to gain administrative privileges through URL encoding manipulation, requiring immediate emergency patching.
CVE-2026-73570 enables unauthenticated command injection on Zimbra mail servers with confirmed active exploitation. Remote attackers execute arbitrary commands without authentication. Immediate patching and detection deployment required for internet-facing infrastructure.
Cisco warns of CVE-2026-76504, a critical zero-day in Catalyst SD-WAN Manager under active exploitation. Attackers can gain unauthenticated administrative access remotely. Organizations must apply emergency patches immediately to prevent network compromise.
