Network Security

Cybersecurity
White House Network Addresses Found Acting as Residential Proxy Exits
Layer3 Intel says six White House network addresses relayed residential proxy traffic 236 times in a month, likely from a device running proxy software.
CVE Vulnerability Alerts
Cisco Patches UCS Central Flaw CVE-2026-76506 and ISE Bugs
Cisco patched UCS Central flaw CVE-2026-76506, an ISE certificate authorization bypass and a Unified CM XSS bug. No workarounds exist and no attacks are known.
CVE Vulnerability Alerts
SonicWall Says Retire GMS as Two Critical Flaws Stay Unpatched
SonicWall disclosed CVE-2026-109593 and CVE-2026-109594 in end-of-life GMS 9.5.2 and earlier, offers no patch, and tells administrators to migrate off it.
CVE Vulnerability Alerts
Binarly Finds Zyxel GS1900 Zero-Day That Bypasses Earlier Patch
Binarly found CVE-2026-107441, an exploited out-of-bounds write in Zyxel GS1900 switches that works on firmware already patched for CVE-2026-7273 in June.
CVE Vulnerability Alerts
Barracuda Flaws Chain Into Root Access on Email Security Gateway
Barracuda disclosed CVE-2026-116606 and CVE-2026-111560, two flaws that chain into root access on Email Security Gateway and other Barracuda appliances.
Cybersecurity
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says built the backdoor into firmware.
Cybersecurity
Refrigeration Attacks Hit Supermarkets in Six European Countries
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising set points to 55 C.
CVE Vulnerability Alerts
Arista Patches Two CVSS 9.8 RCE Flaws Including HTTP2Shell
Arista fixed two CVSS 9.8 remote code execution flaws, HTTP2Shell in VeloCloud Orchestrator and a Linux kernel bug affecting access points and NDR devices.
CVE Vulnerability Alerts
Cisco Patches Exploited ASA/FTD VPN Zero-Day CVE-2026-76418
Cisco fixed CVE-2026-76418, a zero-day that crashes ASA and FTD SSL VPN devices. CISA added it and a GitLab RCE to KEV with a November ...
Cybersecurity
Cyberattack Knocks Belgium’s MyMinfin Tax Portal Offline
Belgium's FPS Finance confirmed a cyberattack and pulled several digital services offline, including MyMinfin, and pushed one tax filing deadline to November 16.