Data & infrastructure
-
Cisco Nexus flaw enables remote root access
Cisco has patched a critical Nexus 9000 vulnerability that can allow an unauthenticated remote attacker to execute code with root privileges on affected Silicon One-based switches.
-
VMware flaws can cross virtual-machine boundary
Broadcom has patched two VMware Workstation and Fusion vulnerabilities that can allow an attacker with administrative control inside a virtual machine to execute code on the host.
-
France and Netherlands press cloud sovereignty
France and the Netherlands are calling for European procurement criteria and stronger cloud-sovereignty protections as the EU prepares a new package of technology and cybersecurity rules.
-
GeoNetwork flaws expose government geoportal backends
Two GeoNetwork vulnerabilities can be chained for unauthenticated remote code execution, with researchers reporting vulnerable internet-facing deployments across government-heavy geospatial infrastructure.
-
Link11 sees fewer but heavier DDoS attacks
Link11 recorded fewer DDoS attacks against its European customer network in early 2026, but peak bandwidth, packet rates, and cumulative attack traffic all increased sharply.
-
Public exploit raises Cleo Harmony exposure
Exploit material has been published for a newly disclosed Cleo Harmony authentication weakness, increasing exposure around a managed-file-transfer platform with a history of criminal targeting.
-
SonicWall confirms SMA1000 zero-days under attack
SonicWall says two vulnerabilities affecting SMA1000 secure-access appliances are being actively exploited, including a critical pre-authentication SSRF flaw and a post-authentication code-execution weakness.
-
BGP hijack poisoned Virtualizor update traffic
A routing hijack affecting Softaculous infrastructure redirected traffic to an attacker-controlled server, enabled fraudulent TLS certificates, and delivered a malicious Virtualizor update to some installations.
-
Viatel buys EDNX in secure networking push
Viatel has acquired UK network specialist EDNX, extending its secure infrastructure capability across Ireland and Britain after buying Scottish cybersecurity company FullProxy in July.
-
France’s SecNumCloud market widens
OVHcloud and Numspot have secured SecNumCloud qualifications as stricter French rules make certified infrastructure a growing condition for sensitive public-sector workloads.