https://netsectribune.com/category/cyber-attacks/barracuda-data-shows-captcha-abuse-now-central-to/NetSec Tribuneen2026-10-16T02:43:35ZBarracuda data shows CAPTCHA abuse now central to malware and phishing campaignshttps://netsectribune.com/category/vulnerabilities/gitpython-argument-injection-flaw-lets-attackers/NetSec Tribuneen2026-10-16T01:58:14ZGitPython Argument Injection Flaw Lets Attackers Read Files via Branch Nameshttps://netsectribune.com/category/vulnerabilities/slican-patches-cve-2026-35088-in-ipx-v6-62-0100/NetSec Tribuneen2026-10-15T22:22:53ZSlican patches CVE-2026-35088 in IPx v6.62.0100; legacy models require hardware upgrades to fixhttps://netsectribune.com/category/vulnerabilities/slican-ipx-webcti-service-exposes-subscriber/NetSec Tribuneen2026-10-15T22:10:38ZSlican IPx WebCTI Service Exposes Subscriber Passwords in Plaintexthttps://netsectribune.com/category/vulnerabilities/high-severity-jetty-flaw-cve-2026-18661-allows/NetSec Tribuneen2026-10-15T21:58:51ZHigh-severity Jetty flaw CVE-2026-18661 allows security bypass in versions up to 12.1.11https://netsectribune.com/category/vulnerabilities/unauthenticated-yaml-requests-crash-symfony/NetSec Tribuneen2026-10-15T20:34:51ZUnauthenticated YAML Requests Crash Symfony Processes in High-Severity CVE-2026-109413 Flawhttps://netsectribune.com/category/vulnerabilities/opnsense-xss-flaw-allows-admin-session-hijack-via/NetSec Tribuneen2026-10-15T20:01:17ZOPNsense XSS Flaw Allows Admin Session Hijack via OpenVPN Widgethttps://netsectribune.com/category/cyber-attacks/interpol-leads-17-nations-in-takedown-of-csam/NetSec Tribuneen2026-10-15T12:07:31ZINTERPOL Leads 17 Nations in Takedown of CSAM Messaging Networkshttps://netsectribune.com/category/vulnerabilities/fortinet-confirms-wild-exploitation-of-ems-bypass/NetSec Tribuneen2026-10-15T10:00:51ZFortinet Confirms Wild Exploitation of EMS Bypass; Public PoC Targets Versions 7.4.5 and 7.4.6https://netsectribune.com/category/cyber-attacks/espionage-actors-deploy-winrar-exploit-to-target/NetSec Tribuneen2026-10-15T05:51:29ZEspionage actors deploy WinRAR exploit to target CIS energy and water sectors in evolving campaignhttps://netsectribune.com/category/vulnerabilities/aws-urges-immediate-jsii-diff-version-check-to/NetSec Tribuneen2026-10-15T04:56:17ZAWS urges immediate jsii-diff version check to block shell command execution via CVE-2026-15895https://netsectribune.com/category/threat-intel/recorded-future-links-tag-193-to-central-asian/NetSec Tribuneen2026-10-15T03:12:47ZRecorded Future Links TAG-193 to Central Asian Espionage Campaignshttps://netsectribune.com/category/vulnerabilities/unauthenticated-rce-threatens-office-365-and-ltsc/NetSec Tribuneen2026-10-14T23:31:31ZUnauthenticated RCE Threatens Office 365 and LTSC via High-Severity Access Heap Overflow CVE-2026-102850https://netsectribune.com/category/vulnerabilities/better-auth-oauth-flaw-lets-attackers-bypass/NetSec Tribuneen2026-10-14T23:31:31ZBetter Auth OAuth flaw lets attackers bypass login as any userhttps://netsectribune.com/category/vulnerabilities/sharepoint-server-subscription-edition-patched/NetSec Tribuneen2026-10-14T22:49:01ZSharePoint Server Subscription Edition Patched for CVE-2026-102860 Network Privilege Escalationhttps://netsectribune.com/category/vulnerabilities/hestia-panel-users-can-escalate-to-root-via/NetSec Tribuneen2026-10-14T19:13:04ZHestia Panel Users Can Escalate to Root via Search Featurehttps://netsectribune.com/category/vulnerabilities/unauthenticated-attackers-gain-root-access-to/NetSec Tribuneen2026-10-14T18:29:08ZUnauthenticated Attackers Gain Root Access to Cisco Secure Email Gateway via File Reputation Servicehttps://netsectribune.com/category/vulnerabilities/microsoft-patches-high-severity-net-dos-flaw-cve/NetSec Tribuneen2026-10-14T14:53:36ZMicrosoft Patches High-Severity .NET DoS Flaw CVE-2026-96960 in Cryptography Packagehttps://netsectribune.com/category/vulnerabilities/microsoft-patches-net-wpf-out-of-bounds-write-in/NetSec Tribuneen2026-10-14T11:01:42ZMicrosoft Patches .NET WPF Out-of-Bounds Write in CVE-2026-96224https://netsectribune.com/category/vulnerabilities/microsoft-warns-of-critical-windows-schannel/NetSec Tribuneen2026-10-14T05:55:48ZMicrosoft warns of critical Windows Schannel spoofing flaw CVE-2026-105008