Microsoft Pushes New Exchange V2 Update After Discovering New Security Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has released September 2026 V2 security updates to fix an Exchange Server flaw that lets authenticated attackers access other users’ mailboxes within the same organization. Tracked as CVE-2026–96940, the vulnerability could expose email messages and attachments, making it a …

Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab has released urgent security updates for a critical AI Gateway vulnerability that could allow authenticated attackers to execute commands remotely. Tracked as CVE-2026-90970, the flaw carries a CVSS score of 9.9 and affects self-hosted deployments used to support GitLab …

Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Dell has released security update DSA-2026-448 to address multiple critical vulnerabilities in its Container Storage Modules, including flaws that could allow unauthenticated remote attackers to take full administrative control of affected storage environments. Organizations using vulnerable Dell CSM deployments should …

Citrix NetScaler Keeps Rebooting Following the 0-Day Patch

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix NetScaler customers are reporting repeated appliance reboots after installing build 14.1-73.37, the emergency update released for two zero-day flaws under active attack. The failures appear linked to crafted SAML authentication traffic that crashes the nsaaad service. Citrix says its …

Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Debian has released a major Linux kernel security update covering 1,313 CVE entries, addressing flaws that could allow privilege escalation, denial of service, and information leaks. The fixes are available for Debian’s stable release, Trixie, in Linux source package version …

Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers turned a Microsoft SQL Server into a channel for running commands and moving collected files in an intrusion linked to a Viva Aerobus environment. Their own publicly accessible server then exposed attack tools and stolen material to unrelated internet …

Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are turning trusted software updates into a route for stealing developer and cloud credentials. Recent supply chain incidents show how a single altered package, build action, or publishing token can place malware inside routine development workflows. The risk is …

Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Red Hat has fixed a high-impact vulnerability in Red Hat Satellite that could allow a low-privileged authenticated user to access sensitive host information, including root passwords. Under unsafe configurations, the flaw could also escalate to arbitrary command execution as the …

Multiple Cpanel/WHM Vulnerabilities Allow Arbitrary Command Execution On Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple security flaws in cPanel & WHM could let attackers run malicious scripts in an administrator’s browser session or execute arbitrary commands as root. The vulnerabilities were disclosed on September 29, 2026, and affect all supported cPanel & WHM versions …

OpenClaw Launches Free Open-source Enterprise Agent Platform for AI Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenClaw has launched OpenClaw Enterprise (OCE), a free, open-source platform that helps organizations run persistent AI agents with stronger security and central oversight. Announced on September 29, 2026, the project targets businesses that want agents to handle ongoing work without …