Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has warned that attackers are actively exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway that can give them root access to affected appliances. Tracked as CVE-2026-76519, the flaw carries a CVSS score of 9.8 and allows attacks …

Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers crash worker processes by sending crafted HTTP requests. In certain setups, the memory errors could also allow code execution, although …

24 Security Vulnerabilities Patched in curl Used Across 30 Billion Installations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The curl project released curl 8.23.0 on October 14, 2026, announcing 24 security fixes affecting the widely used data transfer tool and its underlying library, libcurl. The vulnerabilities include credential leaks, authentication errors, command injection, and flaws that can disrupt …

How MSSPs Can Cut Tier 1 Bottlenecks Eating into Profit Margins 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As MSSPs take on more clients, alert volumes grow fast. Analyst capacity usually doesn’t. That gap shows up in triage and response first. Teams spend too much time checking IOCs, switching between tools, rebuilding context, and escalating cases that could have …

Microsoft’s October Windows Updates Break Remote Desktop Services

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft released an out-of-band Windows update on September 14, 2026, to fix problems introduced by its September 8 security updates. The release addresses Remote Desktop Services failures, missing shared folders in Linux virtual machines, and audio errors affecting some USB …

Microsoft’s Recent Windows Updates Break Remote Desktop Services With Error “0xC000000D”

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has confirmed a Windows 11 Remote Desktop issue that can prevent non-admin users from connecting to remote computers with Administrator protection enabled. The problem follows the September 22, 2026, non-security preview update, KB5124010, or later updates. It mainly affects …

U.K. Sanctions Cryptomus for RU Money Laundering

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial …

Hackers Use Fake WatchGuard VPN Download Site to Steal Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers used a fake WatchGuard VPN download website to steal login details before offering visitors the real, digitally signed VPN installer. The attack collected a VPN server address, username, and password through a browser pop-up, leaving victims exposed without installing …

Meta, Google, Microsoft and OpenAI Join Global Crackdown on West African Scam Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Meta, Google, Microsoft and OpenAI joined an international crackdown on West African scam networks that removed more than 3.7 million Facebook and Instagram accounts, pages and groups. Announced on October 13, 2026, the operation led to 28 arrests and the …

PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A public proof of concept for Vghost, a high-severity Linux vhost flaw tracked as CVE-2026-74580, shows how the bug can let a local user gain root access or, in certain virtual machine setups, break out of a guest and affect …