Multi-source correlated cybersecurity intelligence. Fast, high-signal threat reporting updated hourly.https://www.yazoul.net/news/en-usCopyright 2026 Yazoul Security - https://www.yazoul.net/newscontact@yazoul.net (Yazoul Security)contact@yazoul.net (Yazoul Security)https://www.yazoul.net/news/icon-128.pnghttps://www.yazoul.net/newshttps://www.yazoul.net/news/article/progress-kemp-loadmaster-flaw-hits-cisa-kev-after-792-reported-exploit-attempts/https://www.yazoul.net/news/article/progress-kemp-loadmaster-flaw-hits-cisa-kev-after-792-reported-exploit-attempts/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catal</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/progress-kemp-loadmaster-flaw-hits-cisa-kev-after-792-reported-exploit-attempts/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sat, 08 Aug 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-flags-teamcity-cve-2026-63077-rce-flaw-under-active-exploitation-in-the-wil/https://www.yazoul.net/news/article/cisa-flags-teamcity-cve-2026-63077-rce-flaw-under-active-exploitation-in-the-wil/<p><strong>CRITICAL</strong> - vulnerability</p> <p>A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-flags-teamcity-cve-2026-63077-rce-flaw-under-active-exploitation-in-the-wil/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Thu, 06 Aug 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-flags-langflow-rce-tomcat-and-n-central-flaws-as-actively-exploited/https://www.yazoul.net/news/article/cisa-flags-langflow-rce-tomcat-and-n-central-flaws-as-actively-exploited/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in t</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-flags-langflow-rce-tomcat-and-n-central-flaws-as-actively-exploited/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Wed, 05 Aug 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-adds-exploited-n-able-n-central-flaw-to-kev-after-customer-compromises/https://www.yazoul.net/news/article/cisa-adds-exploited-n-able-n-central-flaw-to-kev-after-customer-compromises/<p><strong>CRITICAL</strong> - vulnerability</p> <p>N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/cisa-adds-exploited-n-able-n-central-flaw-to-kev-after-customer-compromises/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Mon, 03 Aug 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisco-fmc-zero-day-actively-exploited-static-credentials-could-expose-sensitive-/https://www.yazoul.net/news/article/cisco-fmc-zero-day-actively-exploited-static-credentials-could-expose-sensitive-/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorize</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/cisco-fmc-zero-day-actively-exploited-static-credentials-could-expose-sensitive-/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Wed, 29 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/attackers-exploit-arista-velocloud-orchestrator-command-injection-flaw/https://www.yazoul.net/news/article/attackers-exploit-arista-velocloud-orchestrator-command-injection-flaw/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/attackers-exploit-arista-velocloud-orchestrator-command-injection-flaw/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Mon, 27 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/check-point-patches-exploited-smartconsole-flaw-allowing-full-admin-access/https://www.yazoul.net/news/article/check-point-patches-exploited-smartconsole-flaw-allowing-full-admin-access/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company's SmartConsole graphical user interface (GUI) admin panel. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/check-point-patches-exploited-smartconsole-flaw-allowing-full-admin-access/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Thu, 23 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/https://www.yazoul.net/news/article/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Hackers are exploiting the 'wp2shell' critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 21 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/two-sonicwall-sma-1000-zero-days-exploited-one-could-enable-admin-commands/https://www.yazoul.net/news/article/two-sonicwall-sma-1000-zero-days-exploited-one-could-enable-admin-commands/<p><strong>CRITICAL</strong> - vulnerability</p> <p>SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, in zero-day attacks and urges customers to install the newly released</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/two-sonicwall-sma-1000-zero-days-exploited-one-could-enable-admin-commands/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 14 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/icagenda-and-balbooa-forms-joomla-flaws-reportedly-exploited-as-zero-days/https://www.yazoul.net/news/article/icagenda-and-balbooa-forms-joomla-flaws-reportedly-exploited-as-zero-days/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabiliti</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/icagenda-and-balbooa-forms-joomla-flaws-reportedly-exploited-as-zero-days/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Mon, 13 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w28-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w28-weekly-threat-roundup/<p><strong>CRITICAL</strong> - roundup</p> <p>Cybersecurity roundup for 2026-07-06 to 2026-07-12. 4 CVE advisories, 1 breach reports, 2 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w28-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 12 Jul 2026 00:00:00 GMTcriticalroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-adds-4-actively-exploited-adobe-joomla-and-langflow-flaws-to-kev/https://www.yazoul.net/news/article/cisa-adds-4-actively-exploited-adobe-joomla-and-langflow-flaws-to-kev/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The </p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-adds-4-actively-exploited-adobe-joomla-and-langflow-flaws-to-kev/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Wed, 08 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/suspected-china-aligned-hackers-exploit-roundcube-flaws-against-universities/https://www.yazoul.net/news/article/suspected-china-aligned-hackers-exploit-roundcube-flaws-against-universities/<p><strong>CRITICAL</strong> - vulnerability</p> <p>A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of </p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/suspected-china-aligned-hackers-exploit-roundcube-flaws-against-universities/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 07 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w27-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w27-weekly-threat-roundup/<p><strong>CRITICAL</strong> - roundup</p> <p>Cybersecurity roundup for 2026-06-29 to 2026-07-05. 1 CVE advisories, 1 breach reports, 3 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w27-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 05 Jul 2026 00:00:00 GMTcriticalroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/ransomware-groups-turn-to-citrix-bleed-2-byovd-and-supply-chain-credentials/https://www.yazoul.net/news/article/ransomware-groups-turn-to-citrix-bleed-2-byovd-and-supply-chain-credentials/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. 'Although tactics differ between </p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/ransomware-groups-turn-to-citrix-bleed-2-byovd-and-supply-chain-credentials/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Thu, 02 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/sharepoint-rce-cve-2026-45659-added-to-cisa-kev-after-active-exploitation/https://www.yazoul.net/news/article/sharepoint-rce-cve-2026-45659-added-to-cisa-kev-after-active-exploitation/<p><strong>CRITICAL</strong> - vulnerability</p> <p>CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability patched in May. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/sharepoint-rce-cve-2026-45659-added-to-cisa-kev-after-active-exploitation/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Thu, 02 Jul 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/https://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/<p><strong>CRITICAL</strong> - vulnerability</p> <p>An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn Steal</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/attackers-exploit-simplehelp-cve-2026-48558-to-deploy-taskweaver-and-djinn-steal/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 30 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w26-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w26-weekly-threat-roundup/<p><strong>HIGH</strong> - roundup</p> <p>Cybersecurity roundup for 2026-06-22 to 2026-06-28. 0 CVE advisories, 3 breach reports, 2 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w26-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 28 Jun 2026 00:00:00 GMThighroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-warns-critical-lantronix-eds5000-flaw-is-being-actively-exploited/https://www.yazoul.net/news/article/cisa-warns-critical-lantronix-eds5000-flaw-is-being-actively-exploited/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, urging Federal Civilia</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-warns-critical-lantronix-eds5000-flaw-is-being-actively-exploited/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Wed, 24 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cve-2024-40766-the-patch-fixed-the-bug-nobody-fixed-the-configuration-tue-jun-23/https://www.yazoul.net/news/article/cve-2024-40766-the-patch-fixed-the-bug-nobody-fixed-the-configuration-tue-jun-23/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The vulnerability &#xd;</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cve-2024-40766-the-patch-fixed-the-bug-nobody-fixed-the-configuration-tue-jun-23/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 23 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w25-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w25-weekly-threat-roundup/<p><strong>HIGH</strong> - roundup</p> <p>Cybersecurity roundup for 2026-06-15 to 2026-06-21. 1 CVE advisories, 5 breach reports, 3 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w25-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 21 Jun 2026 00:00:00 GMThighroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-warns-of-actively-exploited-joomla-jce-flaw-allowing-php-code-execution/https://www.yazoul.net/news/article/cisa-warns-of-actively-exploited-joomla-jce-flaw-allowing-php-code-execution/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabi</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-warns-of-actively-exploited-joomla-jce-flaw-allowing-php-code-execution/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Wed, 17 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-flags-litespeed-cpanel-plugin-flaw-exploited-for-root-privilege-escalation/https://www.yazoul.net/news/article/cisa-flags-litespeed-cpanel-plugin-flaw-exploited-for-root-privilege-escalation/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in t</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/cisa-flags-litespeed-cpanel-plugin-flaw-exploited-for-root-privilege-escalation/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 16 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisco-releases-security-updates-for-actively-exploited-sd-wan-manager-flaw/https://www.yazoul.net/news/article/cisco-releases-security-updates-for-actively-exploited-sd-wan-manager-flaw/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root privileges. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/cisco-releases-security-updates-for-actively-exploited-sd-wan-manager-flaw/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Mon, 15 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w24-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w24-weekly-threat-roundup/<p><strong>CRITICAL</strong> - roundup</p> <p>Cybersecurity roundup for 2026-06-08 to 2026-06-14. 4 CVE advisories, 3 breach reports, 5 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w24-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 14 Jun 2026 00:00:00 GMTcriticalroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-adds-cisco-chrome-and-arista-flaws-to-kev-catalog-amid-active-exploitation/https://www.yazoul.net/news/article/cisa-adds-cisco-chrome-and-arista-flaws-to-kev-catalog-amid-active-exploitation/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitati</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-adds-cisco-chrome-and-arista-flaws-to-kev-catalog-amid-active-exploitation/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Wed, 10 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-issues-new-directive-improving-how-federal-agencies-prioritize-the-mitigati/https://www.yazoul.net/news/article/cisa-issues-new-directive-improving-how-federal-agencies-prioritize-the-mitigati/<p><strong>MEDIUM</strong> - vulnerability</p> <p></p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-issues-new-directive-improving-how-federal-agencies-prioritize-the-mitigati/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Wed, 10 Jun 2026 00:00:00 GMTmediumvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/chrome-v8-zero-day-cve-2026-11645-exploited-in-the-wild-patch-now/https://www.yazoul.net/news/article/chrome-v8-zero-day-cve-2026-11645-exploited-in-the-wild-patch-now/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Google has released security updates to address 74 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-11645 (CVSS </p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/chrome-v8-zero-day-cve-2026-11645-exploited-in-the-wild-patch-now/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 09 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-announces-winners-of-the-2026-president-s-cup-cybersecurity-competition/https://www.yazoul.net/news/article/cisa-announces-winners-of-the-2026-president-s-cup-cybersecurity-competition/<p><strong>MEDIUM</strong> - vulnerability</p> <p></p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-announces-winners-of-the-2026-president-s-cup-cybersecurity-competition/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 09 Jun 2026 00:00:00 GMTmediumvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/litellm-flaw-cve-2026-42271-exploited-in-the-wild-chains-to-unauthenticated-rce/https://www.yazoul.net/news/article/litellm-flaw-cve-2026-42271-exploited-in-the-wild-chains-to-unauthenticated-rce/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/litellm-flaw-cve-2026-42271-exploited-in-the-wild-chains-to-unauthenticated-rce/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 09 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/critical-check-point-vpn-flaw-exploited-to-bypass-passwords-in-ikev1-setups/https://www.yazoul.net/news/article/critical-check-point-vpn-flaw-exploited-to-bypass-passwords-in-ikev1-setups/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protoco</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/critical-check-point-vpn-flaw-exploited-to-bypass-passwords-in-ikev1-setups/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Mon, 08 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w23-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w23-weekly-threat-roundup/<p><strong>HIGH</strong> - roundup</p> <p>Cybersecurity roundup for 2026-06-01 to 2026-06-07. 2 CVE advisories, 4 breach reports, 4 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w23-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 07 Jun 2026 00:00:00 GMThighroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-adds-actively-exploited-solarwinds-serv-u-dos-flaw-to-kev-catalog/https://www.yazoul.net/news/article/cisa-adds-actively-exploited-solarwinds-serv-u-dos-flaw-to-kev-catalog/<p><strong>CRITICAL</strong> - vulnerability</p> <p>CISA warned today that hackers are now actively exploiting a recently patched high-severity SolarWinds Serv-U flaw to crash servers. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/cisa-adds-actively-exploited-solarwinds-serv-u-dos-flaw-to-kev-catalog/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Fri, 05 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-adds-exploited-magento-rce-flaw-cve-2026-45247-to-kev-catalog/https://www.yazoul.net/news/article/cisa-adds-exploited-magento-rce-flaw-cve-2026-45247-to-kev-catalog/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer, a popular Magento full-page cache extension, to its Known Exploited</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-adds-exploited-magento-rce-flaw-cve-2026-45247-to-kev-catalog/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Wed, 03 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-urges-stronger-security-for-automatic-tank-gauge-systems/https://www.yazoul.net/news/article/cisa-urges-stronger-security-for-automatic-tank-gauge-systems/<p><strong>MEDIUM</strong> - vulnerability</p> <p></p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-urges-stronger-security-for-automatic-tank-gauge-systems/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 02 Jun 2026 00:00:00 GMTmediumvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/oracle-weblogic-cve-2024-21182-added-to-kev-catalog-after-active-exploitation/https://www.yazoul.net/news/article/oracle-weblogic-cve-2024-21182-added-to-kev-catalog-after-active-exploitation/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) Catalog, ba</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/oracle-weblogic-cve-2024-21182-added-to-kev-catalog-after-active-exploitation/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 02 Jun 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w22-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w22-weekly-threat-roundup/<p><strong>CRITICAL</strong> - roundup</p> <p>Cybersecurity roundup for 2026-05-25 to 2026-05-31. 2 CVE advisories, 5 breach reports, 4 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w22-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 31 May 2026 00:00:00 GMTcriticalroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/pan-os-globalprotect-authentication-bypass-cve-2026-0257-under-active-exploitati/https://www.yazoul.net/news/article/pan-os-globalprotect-authentication-bypass-cve-2026-0257-under-active-exploitati/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Palo Alto Networks has warned that a recently disclosed medium-severity security flaw impacting PAN-OS and Prisma Access has come under active exploitation in the wild. The vulnerability, tracked as C</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/pan-os-globalprotect-authentication-bypass-cve-2026-0257-under-active-exploitati/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sat, 30 May 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/attackers-use-llm-agent-for-post-exploitation-after-marimo-cve-2026-39987-exploi/https://www.yazoul.net/news/article/attackers-use-llm-agent-for-post-exploitation-after-marimo-cve-2026-39987-exploi/<p><strong>CRITICAL</strong> - vulnerability</p> <p>An unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible</p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/attackers-use-llm-agent-for-post-exploitation-after-marimo-cve-2026-39987-exploi/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Fri, 29 May 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/threat-actors-exploit-critical-forticlient-ems-flaw-to-deploy-credential-stealer/https://www.yazoul.net/news/article/threat-actors-exploit-critical-forticlient-ems-flaw-to-deploy-credential-stealer/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/threat-actors-exploit-critical-forticlient-ems-flaw-to-deploy-credential-stealer/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Thu, 28 May 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-announces-revised-town-hall-schedule-to-engage-with-stakeholders-on-cyber-i/https://www.yazoul.net/news/article/cisa-announces-revised-town-hall-schedule-to-engage-with-stakeholders-on-cyber-i/<p><strong>MEDIUM</strong> - vulnerability</p> <p></p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-announces-revised-town-hall-schedule-to-engage-with-stakeholders-on-cyber-i/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Tue, 26 May 2026 00:00:00 GMTmediumvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w21-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w21-weekly-threat-roundup/<p><strong>HIGH</strong> - roundup</p> <p>Cybersecurity roundup for 2026-05-18 to 2026-05-24. 4 CVE advisories, 5 breach reports, 3 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w21-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 24 May 2026 00:00:00 GMThighroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-adds-exploited-langflow-and-trend-micro-apex-one-vulnerabilities-to-kev/https://www.yazoul.net/news/article/cisa-adds-exploited-langflow-and-trend-micro-apex-one-vulnerabilities-to-kev/<p><strong>CRITICAL</strong> - vulnerability</p> <p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog, </p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-adds-exploited-langflow-and-trend-micro-apex-one-vulnerabilities-to-kev/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Fri, 22 May 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/drupal-core-sql-injection-bug-actively-exploited-added-to-cisa-kev/https://www.yazoul.net/news/article/drupal-core-sql-injection-bug-actively-exploited-added-to-cisa-kev/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Drupal is warning that hackers are attempting to exploit a 'highly critical' SQL injection vulnerability announced earlier this week. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/drupal-core-sql-injection-bug-actively-exploited-added-to-cisa-kev/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Fri, 22 May 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisa-enhances-known-exploited-vulnerabilities-catalog-to-include-new-nomination-/https://www.yazoul.net/news/article/cisa-enhances-known-exploited-vulnerabilities-catalog-to-include-new-nomination-/<p><strong>MEDIUM</strong> - vulnerability</p> <p></p> <p><strong>Sources:</strong> 1 correlated source</p> <p><a href="https://www.yazoul.net/news/article/cisa-enhances-known-exploited-vulnerabilities-catalog-to-include-new-nomination-/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Thu, 21 May 2026 00:00:00 GMTmediumvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w20-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w20-weekly-threat-roundup/<p><strong>CRITICAL</strong> - roundup</p> <p>Cybersecurity roundup for 2026-05-11 to 2026-05-17. 3 CVE advisories, 3 breach reports, 1 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w20-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 17 May 2026 00:00:00 GMTcriticalroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/cisco-catalyst-sd-wan-controller-auth-bypass-actively-exploited-to-gain-admin-ac/https://www.yazoul.net/news/article/cisco-catalyst-sd-wan-controller-auth-bypass-actively-exploited-to-gain-admin-ac/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed attackers to gain administrat</p> <p><strong>Sources:</strong> 3 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/cisco-catalyst-sd-wan-controller-auth-bypass-actively-exploited-to-gain-admin-ac/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Thu, 14 May 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/2026-w19-weekly-threat-roundup/https://www.yazoul.net/news/article/2026-w19-weekly-threat-roundup/<p><strong>CRITICAL</strong> - roundup</p> <p>Cybersecurity roundup for 2026-05-04 to 2026-05-10. 10 CVE advisories, 5 breach reports, 4 threat news stories.</p> <p><strong>Sources:</strong> 0 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/2026-w19-weekly-threat-roundup/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Sun, 10 May 2026 00:00:00 GMTcriticalroundupSecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/ivanti-epmm-cve-2026-6973-rce-under-active-exploitation-grants-admin-level-acces/https://www.yazoul.net/news/article/ivanti-epmm-cve-2026-6973-rce-under-active-exploitation-grants-admin-level-acces/<p><strong>CRITICAL</strong> - vulnerability</p> <p>Ivanti warned customers today to patch a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) exploited in zero-day attacks. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/ivanti-epmm-cve-2026-6973-rce-under-active-exploitation-grants-admin-level-acces/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Thu, 07 May 2026 00:00:00 GMTcriticalvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)https://www.yazoul.net/news/article/palo-alto-pan-os-flaw-under-active-exploitation-enables-remote-code-execution/https://www.yazoul.net/news/article/palo-alto-pan-os-flaw-under-active-exploitation-enables-remote-code-execution/<p><strong>MEDIUM</strong> - vulnerability</p> <p>Palo Alto Networks warned customers today that a critical-severity unpatched vulnerability in the PAN-OS User-ID Authentication Portal is being exploited in attacks. [...]</p> <p><strong>Sources:</strong> 2 correlated sources</p> <p><a href="https://www.yazoul.net/news/article/palo-alto-pan-os-flaw-under-active-exploitation-enables-remote-code-execution/">Read the full article on Yazoul Security</a></p> <hr/> <p><em>Published by <a href="https://www.yazoul.net/news">Yazoul Security - Cyber News</a></em></p> <p><em>Generated by Yazoul AI, an automated pipeline. Not reviewed by a person before publication.</em></p>Wed, 06 May 2026 00:00:00 GMTmediumvulnerabilitySecurityCyberNewsYazoul Security (contact@yazoul.net)