Vulnerabilities

Vulnerabilities | News, how-tos, features, reviews, and videos

A 13-year-old flaw is exposing tens of thousands of data center management systems

Lava researchers found more than 36,000 internet-exposed baseboard management controllers vulnerable to a 13-year-old IPMI flaw, giving attackers a path beneath the operating system.

By Taryn Plumb

Jul 28, 20266 mins

Data Center ManagementServersVulnerabilities

Linux kernel maintainers suggest a ‘kill switch’ to protect systems until a zero-day vulnerability is patched

By Howard Solomon

May 11, 20266 mins

Operating SystemsVulnerabilitiesZero-Day Vulnerabilities

Flawed Cisco update threatens to stop APs from getting further patches

By Howard Solomon

Apr 17, 20265 mins

NetworkingNetworking DevicesVulnerabilities

Cisco fixes critical IMC auth bypass present in many products

By Lucian Constantin

Apr 2, 20263 mins

Network SecuritySecurityVulnerabilities

Vim and GNU Emacs: Claude Code helpfully found zero-day exploits for both

By John E. Dunn

Apr 1, 20264 mins

Artificial IntelligenceSecurityVulnerabilities

Articles

Chained vulnerabilities in Cisco Catalyst switches could induce denial-of-service

A weakness in a humble lobby account enabled Opswat researchers to elevate privileges.

By John E. Dunn

Mar 25, 2026 5 mins

Network SecurityNetwork SwitchesNetworking Devices

Cisco issues emergency patches for critical firewall vulnerabilities

Flaws in the web management interface give unauthenticated attackers remote root access.

By John E. Dunn

Mar 5, 2026 4 mins

FirewallsNetwork SecurityNetworking Devices

Security hole could let hackers take over Juniper Networks PTX core routers

The vulnerability is especially dangerous because this model sits in the network core, so attackers could intercept or redirect data, says an expert.

By Howard Solomon

Feb 27, 2026 4 mins

Enterprise RoutersNetwork SecurityNetworking Devices

Four new vulnerabilities found in Ingress NGINX

Two carry CVSS scores of 8.8, demanding that admins upgrade to the latest versions of the controller.

By Howard Solomon

Feb 5, 2026 4 mins

SecurityVulnerabilities

Crooks are hijacking and reselling AI infrastructure: Report

Researchers at Pillar Security say threat actors are accessing unprotected LLMs and MCP endpoints for profit. Here’s how CSOs can lower the risk.

By Howard Solomon

Jan 28, 2026 7 mins

Artificial IntelligenceCybercrimeVulnerabilities

Palo Alto Networks patches firewalls after discovery of a new denial-of-service flaw

A previous virtually identical zero day DoS vulnerability was targeted in the wild, and there's already a PoC for this one.

By John E. Dunn

Jan 15, 2026 4 mins

FirewallsNetworking DevicesVulnerabilities

Cisco identifies vulnerability in ISE network access control devices

A successful attacker could view sensitive information that even admins can’t access.

By Howard Solomon

Jan 8, 2026 5 mins

Access ControlIdentity and Access ManagementNetwork Security

Holes in Veeam Backup suite allow remote code execution, creation of malicious backup config files

The vendor has issued a patch to close four holes in its flagship Backup & Replication suite; version 13 users are advised to audit their backup config files and closely monitor backup jobs.

By Howard Solomon

Jan 7, 2026 4 mins

Backup and RecoveryData CenterVulnerabilities

WatchGuard fixes ‘critical’ zero-day allowing firewall takeover

“Threat actors are actively attempting to exploit this vulnerability in the wild,” warns vendor.

By John E. Dunn

Dec 19, 2025 4 mins

Network SecurityVulnerabilitiesZero-Day Vulnerabilities

HPE OneView vulnerable to remote code execution attack

An unauthenticated user can execute the attack, and there’s no mitigation, just a hotfix that should be applied immediately.

By Howard Solomon

Dec 18, 2025 3 mins

Network SecuritySecurityVulnerabilities

Fluent Bit vulnerabilities could enable full cloud takeover

Flaws in Fluent Bit could let attackers inject fake logs, reroute telemetry, and execute arbitrary code across cloud platforms.

By Shweta Sharma

Nov 25, 2025 4 mins

Cloud SecuritySecurityVulnerabilities

Red Hat OpenShift AI weakness allows full cluster compromise, warns advisory

There’s no evidence of exploitation but sysadmins will want to check their environments.

By John E. Dunn

Oct 2, 2025 1 min

Kubernetes and ContainersVulnerabilities

View all

A 13-year-old flaw is exposing tens of thousands of data center management systems

Arista patches maximum severity vulnerability that is already being exploited

Linux XFS has a decade-old race condition allowing full root access

Attackers exploiting unpatched Cisco SD-WAN flaw

Critical vulnerability in Cisco Secure Workload rated at maximum severity

Linux kernel maintainers suggest a ‘kill switch’ to protect systems until a zero-day vulnerability is patched

Flawed Cisco update threatens to stop APs from getting further patches

Cisco fixes critical IMC auth bypass present in many products

Vim and GNU Emacs: Claude Code helpfully found zero-day exploits for both

Articles

Chained vulnerabilities in Cisco Catalyst switches could induce denial-of-service

Cisco issues emergency patches for critical firewall vulnerabilities

Security hole could let hackers take over Juniper Networks PTX core routers

Four new vulnerabilities found in Ingress NGINX

Crooks are hijacking and reselling AI infrastructure: Report

Palo Alto Networks patches firewalls after discovery of a new denial-of-service flaw

Cisco identifies vulnerability in ISE network access control devices

Holes in Veeam Backup suite allow remote code execution, creation of malicious backup config files

WatchGuard fixes ‘critical’ zero-day allowing firewall takeover

HPE OneView vulnerable to remote code execution attack

Fluent Bit vulnerabilities could enable full cloud takeover

Red Hat OpenShift AI weakness allows full cluster compromise, warns advisory

Resources

Fireside Chat: The case for Autonomous IT

From reactive to ready: What’s next for Autonomous IT

Atlassian named a Leader in The Forrester Wave™: Conversational AI Platforms for Employee Services, Q3 2026