Data & infrastructure
-
Juniper routing vulnerabilities draw critical warning
Critical vulnerabilities affecting Juniper networking software could expose certain routing and management configurations to code execution, denial of service, or elevated privileges.
-
France warns over Stormshield firewall vulnerabilities
France’s national cyber incident response service has warned of vulnerabilities in Stormshield Network Security that could undermine security policies and compromise data integrity.
-
Bullhorn restores services after cyber incident
Staffing software provider Bullhorn has begun restoring services following a cyber incident that disrupted recruitment platforms across several regions, including the UK.
-
Keeper connects Tenable cloud findings to privileged access remediation
Keeper and Tenable have introduced a workflow linking cloud identity findings to governed privileged access actions, alongside a separate credentialed vulnerability-scanning integration.
-
Google brings Wiz runtime detection into GKE with managed preview add-on
Google Cloud has introduced a preview Wiz Runtime Sensor add-on for GKE, offering managed deployment of runtime monitoring across Standard and Autopilot clusters.
-
New NetScaler research details log poisoning and post-exploitation payloads
Zscaler researchers have published a technical account of exploitation of CVE-2026-88771 in Citrix NetScaler, including log poisoning and attempted web-shell deployment.
-
NHS cyber alert warns BeyondTrust Remote Support flaw is being exploited
NHS England warns of active exploitation of a critical BeyondTrust Remote Support vulnerability that could let unauthenticated attackers upload files to affected appliances.
-
Microsoft issues workaround for Exchange instability after October Windows updates
Microsoft says some on-premises Exchange servers can become unstable after October Windows updates and has published a configuration workaround while it investigates.
-
NGINX patches five conditional web-server security vulnerabilities
New NGINX stable and mainline releases address memory corruption, HTTP/3 request handling and TLS session weaknesses, with each issue requiring a particular configuration or feature.
-
Palo Alto Networks confirms limited attacks against PAN-OS management flaw
Palo Alto Networks says an authenticated management-interface flaw can give an attacker root-level execution and that very limited attempts have been observed.