150 casos · pág. 2/8
Cisco disclosed CVE-2026-20218, a stack buffer overflow in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send crafted VBA data to a targeted device, causing the Snort 3 Detection Engine to restart unexpectedly and producing a denial of ser…
Cisco disclosed CVE-2026-76487, an improper access control vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME). An unauthenticated, remote attacker could send a crafted HTTP request to an affected device and bypass access controls. A successful exploit could give th…
Cisco published an advisory covering multiple vulnerabilities in the Snort 3 Detection Engine that affect several Cisco products. An unauthenticated, remote attacker could force the engine to restart unexpectedly, causing a denial of service (DoS). Cisco rates the Security Impact Rating as Medium and has released software updates. No work…
Cisco disclosed CVE-2026-20011, a medium-severity vulnerability in the Snort 3 SMTP MIME Decoder affecting multiple Cisco products. An unauthenticated, remote attacker can cause the Snort 3 Detection Engine to restart, producing a denial-of-service condition. Cisco has released software updates, and no workarounds exist. The advisory is p…
Cisco disclosed CVE-2026-76505, a High-rated vulnerability in the IPv4 packet processing of Cisco IOS XR Software on Cisco ASR 9000 and 9900 Series routers and ASR 9902/9903 Compact High-Performance Routers. An unauthenticated, remote attacker can send crafted IPv4 packets that trigger network processor (NP) errors, resetting or shutting …
Cisco disclosed CVE-2026-76435, an information disclosure vulnerability in Cisco Expressway Series (Expressway-C and Expressway-E). An unauthenticated, remote attacker can obtain sensitive information from an affected device. Cisco rates the Security Impact as Medium. Software updates are available, there are no workarounds, and the artic…
Huntress announced Attack Reduction, a new capability in Huntress Managed ESPM (Early Access) that disables the "Windows key + R" shortcut for users who never use the Run dialog, aiming to break the most common ClickFix attack chain. The post opens with an attempted fake-CAPTCHA lure that targeted a Huntress employee on a spoofed airport …
CrowdStrike Counter Adversary Operations published a blog post on 21 October 2026 titled "CrowdStrike Uncovers New Agentic AI Campaigns". The captured text contains only site navigation and a list of related post headlines. It has no body text, so the campaigns, actors, targets, tooling and indicators are not described. No attribution, ma…
Cloudflare has made generally available to all customers, including Free plans, two new WAF capabilities: full transaction detections, which correlate each HTTP request with the origin's response to confirm exploitation, and response rules, which block the origin's response before it reaches the requester. The first managed protections ta…
Cloudflare and Commerce.com describe enabling WebMCP, an experimental Google browser standard that exposes structured tools (e.g. searchproducts, addtocart) to AI shopping agents, across almost 100,000 Commerce.com storefronts. Cloudflare injects a script at the edge, so merchants do not have to edit their themes. This is product and part…
A Check Point vendor blog post argues that AI training and inference workloads, private models, GPU infrastructure, containers, APIs and autonomous agents are changing data center security. It cites the 2026 Check Point Cloud Security Report: 29% of organizations are already moving AI workloads to on-premises or private cloud, and another…
Industrial Defender, an OT cybersecurity vendor, released a new platform version adding internal network security monitoring (INSM) and Risk Signal, announced via a CyberNewswire press release on October 20, 2026. The INSM capability targets the FERC-approved NERC CIP-015-1 standard, which requires entities with high and medium impact BES…
Tenable describes how it moved Tenable One AI Exposure detectors (jailbreaks, prompt injection, harmful content, data exposure) from an English-centric "translate-then-detect" design to a single native multilingual model. The article is product and engineering news and reports no incident, vulnerability or threat actor activity. Tenable b…
CrowdStrike published a blog post dated 2026-10-20 announcing that it has achieved the UK National Cyber Security Centre (NCSC) Cyber Incident Response (CIR) Enhanced Level assurance. The captured article text contains only site navigation and a list of other blog titles. It has no body text describing the assurance scope, requirements or…
Palo Alto Networks PSIRT published advisory CVE-2026-0318, a denial-of-service (DoS) vulnerability in PAN-OS affecting Panorama management appliances. The excerpt lists affected builds across the 11.1, 11.2, 12.1 and 12.2 release trains, including many hotfix (h) builds. It gives no CVSS score, attack vector, authentication requirements, …
Palo Alto Networks disclosed CVE-2026-0313, an OS command injection vulnerability (CWE-78) in the OS Query content pack for Cortex XSOAR and Cortex XSIAM. An authenticated administrator can execute arbitrary OS commands on remote endpoints. The vendor rates it MEDIUM with MODERATE suggested urgency (CVSS-BT 6.1 / CVSS-B 8.6) and states it…
Palo Alto Networks PSIRT published advisory CVE-2026-0314, a local denial-of-service (DoS) vulnerability in the GlobalProtect App for Windows. The advisory lists a wide range of affected releases across the 6.0, 6.2 and 6.3 branches. The excerpt gives no CVSS score, exploitation status, attacker prerequisites or fixed versions. Defenders …
Palo Alto Networks published advisory PAN-SA-2026-0013, its monthly Chromium vulnerability update for October 2026. It states that Prisma Browser is affected by vulnerabilities fixed in recent upstream Chromium Stable Channel releases. The vendor rates severity HIGH with suggested urgency MODERATE. Palo Alto Networks is not aware of any m…
Palo Alto Networks disclosed CVE-2026-0311, a server-side request forgery (SSRF, CWE-918) vulnerability in Checkov by Prisma Cloud. A local unauthenticated user can make unauthorized network requests from the host to internal services. The vendor rates it LOW severity with MODERATE suggested urgency (CVSS-B 4.8, CVSS-BT 1.1) and says it i…
Palo Alto Networks published advisory CVE-2026-0312 describing path traversal vulnerabilities (CWE-22) in Checkov by Prisma Cloud that let an unauthenticated local user write files to arbitrary locations on the scanning filesystem. No special configuration is required to be exposed. The vendor rates it MEDIUM (CVSS-B 6.8, CVSS-BT 4.3) wit…
