Siemens Mendix SAML Authentication Bypass Vulnerability CVE-2026-89209
Siemens Mendix SAML modules are impacted by CVE-2026-89209, an authentication bypass vulnerability involving capture-replay in IdP-initiated flows.
Cybersecurity
Vulnerabilities, threat intelligence, malware, breaches and defensive engineering.
GitLab CVE-2026-97229: Critical Integer Overflow Exploitation
Alpine Linux fended off an exploit attempt targeting CVE-2026-97229, a CVSS 10.0 integer overflow vulnerability in GitLab. Explore the mechanism, KEV addition, and remediation requirements.
Oracle EBS Flaw CVE-2026-101767 Under Active Exploitation
Active exploitation has begun against Oracle E-Business Suite flaw CVE-2026-101767 while researchers break down a three-bug PeopleSoft attack chain. Enterprise defenders must audit and patch immediately.
Cisco ASA CVE-2026-76418 SSL VPN Flaw Under Active Attack
Cisco has issued urgent updates for an actively exploited CVSS 8.6 vulnerability in ASA and FTD SSL VPN services. Pre-authentication logic errors allow remote attackers to force device reloads.
NIK C2 Analysis: Inside the AI-Integrated Command Framework
Cisco Talos has uncovered NIK C2, an active Go-based C2 framework that uses victim OpenAI API keys for real-time data analysis while deploying screen-locking ransomware.
CVE-2026-41709: VMware ESX Logging Flaw Exploited as Zero-Day
CISA has added VMware ESX flaw CVE-2026-41709 to its KEV catalog after reports revealed its active use as a zero-day by state-nexus actor Warp Panda.
Analyzing Oracle EBS CVE-2026-101767 and PeopleSoft Attack Chains
Technical breakdown of Oracle E-Business Suite CVE-2026-101767 and PeopleSoft component vulnerabilities being actively probed by threat actors.
Oracle EBS CVE-2026-101767 and PeopleSoft Attack Chains
Active probing of Oracle EBS CVE-2026-101767 and new technical analyses of PeopleSoft CVE-2026-35273 highlight systemic risks in enterprise application suites.