Data & infrastructure
-
Cisco patches critical Expressway flaw exposing clustered systems to root-level code execution
Cisco has fixed a CVSS 9.8 vulnerability in clustered Expressway systems that could permit unauthenticated remote command execution under specific conditions, with no workaround available.
-
Ransomware groups exploit PAN-OS VPN bypass to enter corporate and virtualised systems
Palo Alto Networks Unit 42 says ransomware operators including Qilin and Inc have exploited a PAN-OS authentication bypass, with investigators observing follow-on access to virtualisation and backup infrastructure.
-
Railway warns customers to rotate secrets after suspected access to environment variables
Railway says attackers may have obtained decrypted customer environment variables. It began restoring builds in stages on 22 October while asking users to rotate secrets and reconnect affected integrations.
-
LiteLLM compromised release carried credential stealer through Python and container registries
LiteLLM says stolen developer tokens enabled a malicious 21 October release through PyPI and Docker registries. The affected artifacts were withdrawn that day; the investigation remains open.
-
GitLab issues emergency fixes for critical unauthenticated server code execution flaw
GitLab has released emergency security updates for a CVSS 10.0 vulnerability in its regular expression compiler, warning that some self-managed installations could be exposed to unauthenticated code execution.
-
LOXONE restores logistics after internal cyberattack as data exposure investigation continues
LOXONE says an 18 October attack affected internal CRM and applicant systems. By 21 October, worldwide logistics had resumed, while the company reported no impact on customer building controls.
-
Microsoft retracts October fix for Windows Always On VPN failures
Microsoft has withdrawn its claim that October’s Windows updates resolved an Always On VPN connectivity fault, returning the issue to mitigated status and retaining a temporary protocol workaround.
-
Oracle releases 1,295 security patches across enterprise software portfolio
Oracle’s October Critical Patch Update delivers 1,295 new security patches across enterprise applications and infrastructure products, including critical vulnerabilities in E-Business Suite, middleware and other business systems.
-
OpenStack patches Manila flaws exposing cloud project boundaries
OpenStack has disclosed vulnerabilities in Manila shared file storage that could allow authenticated users to modify another cloud project’s public shares or access export metadata without proper authorisation.
-
Traefik fixes ForwardAuth flaw that could expose users to identity impersonation
Traefik has patched an authentication flaw that could allow an unauthenticated client to inherit another user’s identity when ForwardAuth relies on NTLM or Kerberos Negotiate connections.