Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)
Attackers are actively exploiting a chain of vulnerabilities known as 'MikroTrick' in MikroTik RouterOS routers with the SSH service exposed to the Internet. CERT Polska and expert Costin Raiu revealed that the attacks combine SSH authentication bypass (CVE-2026-67276, CVSS 9.2) and privilege escalation (CVE-2026-86060) to gain full administrative control without credentials. Once the devices are compromised, the hackers create a…
Read the article →
CISA Flags Three Linux Kernel Vulnerabilities Already Exploited
The U.S. Cybersecurity and Infrastructure Security Agency has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog, confirming that there is evidence of active exploitation. CVE-2025-39682, with a CVSS score of 9.8,…
Read the article →
November Patch Tuesday: Over 1,250 Vulnerabilities and an Exploited Outlook Zero-Day
Microsoft has released its November Patch Tuesday, an exceptionally large update covering approximately 1,250 CVEs, 68 of which are classified as critical. The top priority for defenders is an Outlook zero-day that was already…
Read the article →
Historic Record for September 2026 Patch Tuesday With 973 Vulnerabilities Fixed
Microsoft set a new historic record by releasing fixes for as many as 973 vulnerabilities in the September 2026 Patch Tuesday, far surpassing the previous record of 664 updates in July. Among the flaws…
Read the article →
Cisco Fixes a Wide Range of Vulnerabilities in ISE, Including an Already Exploited Flaw
Cisco has released a major security update for Identity Services Engine and ISE Passive Identity Connector, fixing numerous vulnerabilities, including authentication bypass, remote code execution, command injection, SQL injection, and access to sensitive information.…
Read the article →
Two Citrix NetScaler Zero-Days Exploited Globally
Citrix has patched eight vulnerabilities in NetScaler ADC and NetScaler Gateway, including CVE-2026-88771 and CVE-2026-88772, both with a CVSS score of 9.5 and already exploited as zero-days. The first allows an unauthenticated remote attacker…
Read the article →Citrix NetScaler zero-days exploited globally and new high-severity vulnerability
Citrix has released updates for several critical and high-severity vulnerabilities affecting NetScaler ADC and Gateway, platforms frequently exposed to the Internet for remote application access. According to Help Net Security's summary, the RCE vulnerabilities…
Read the article →CISA Adds Five Longstanding Actively Exploited Vulnerabilities to the KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog, adding five significant security flaws. The vulnerabilities include an access control flaw in ProFTPD (CVE-2015-3306), a path traversal…
Read the article →