The CyberSignal (Page 20)

Latest

Flat white line-art of a network orchestrator console with a single open door, on a deep-teal background — the Arista VeloCloud Orchestrator command-injection zero-day.

Vulnerabilities

Arista VeloCloud Orchestrator: A Second CVSS 10.0 Zero-Day Undoes July's Patch

A second, separate CVSS 10.0 zero-day hits on-prem VeloCloud Orchestrator. Patching for July's CVE-2026-16812 does not cover it — fixed builds, pending trains, and IOCs for September's CVE-2026-93952.

Flat white line-art of a build-server tower with an open door and a shield patch, on a teal background — TeamCity CVE-2026-63077 unauthenticated RCE patched.

Vulnerabilities

JetBrains TeamCity On-Premises Critical Unauth RCE Patched (CVE-2026-63077, CVSS 9.8)

Every TeamCity On-Premises version is affected by CVE-2026-63077, a CVSS 9.8 unauthenticated remote code execution flaw. JetBrains shipped fixes in 2025.11.7 and 2026.1.3 this week, plus a security patch plugin for operators who cannot upgrade immediately.

Flat white line-art of a phone and a laptop beside a large shield, on a deep-blue background — Apple's iOS and macOS Tahoe patch cycle.

Vulnerabilities

Apple Patches 87 Vulnerabilities in iOS, 155 in macOS Tahoe

87 for iOS, 155 for macOS Tahoe — Apple's biggest patch drop of the quarter lands this week, with no in-the-wild exploitation reported.

Flat white line-art of a router receiving a network packet beside a shield, on a solid background — OpenWrt's CVE-2026-53921 DHCPv6 patch.

Vulnerabilities

OpenWrt 24.10.8 Patches Critical DHCPv6 Unauth RCE (CVE-2026-53921, CVSS 9.8)

A CVSS 9.8 unauthenticated remote-code-execution flaw sits in odhcpd, OpenWrt's default-on DHCPv6 server. The project shipped 24.10.8 to close it, and router operators should push firmware this week.

Flat white line-art of a JSON document linked to a Java coffee cup and an open padlock, on a teal background — the unpatched Fastjson CVE-2026-16723 flaw.

Vulnerabilities

Unpatched Fastjson Vulnerability Now Actively Exploited

From unpatched advisory to active exploitation — Fastjson on the wire this week.

Flat white line-art of a sealed evaluation box linked by a single line to an open software-repository shelf, on a teal background — JFrog Artifactory zero-day confirmation.

Artificial Intelligence (AI)

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

From sandbox to production repo — the Artifactory attribution lands this week.

Flat white line-art of a robot at an open terminal beside a government building, on a teal background — Hermes AI agent in the Thai Finance Ministry case.

Artificial Intelligence (AI)

Hermes Autonomous Agent in "YOLO Mode" Named in Thai Ministry of Finance Espionage

Now with a name and a mode — the Thai Finance Ministry attribution lands this week.

Flat white line-art of an AI chip linked to three agent shields, on a teal background — Microsoft MAI-Cyber-1-Flash and Project Perception.

Artificial Intelligence (AI)

Microsoft Unveils MAI-Cyber-1-Flash and Project Perception in Cybersecurity AI Push

More AI, more acronyms — Microsoft's cybersecurity AI debut lands this week, and it arrives wrapped in a vendor benchmark claim that tops Anthropic and OpenAI.

Flat white line-art of a model-repository box feeding code into a laptop past an open gate, on a teal background — Hugging Face diffusers safeguard CVEs.

Artificial Intelligence (AI)

Three Hugging Face Diffusers CVEs Bypass Custom-Code Safeguard

From safeguard to bypass — the diffusers CVEs land this week, and any machine that loads an untrusted model repository is the exposed surface.

Flat white line-art of an open back door linked by one line to a distant relay node, on a teal background — the NightLedger backdoor.

Nation-State Cyber Threats

Iran-Linked Nimbus Manticore Deploys NightLedger Backdoor Across Middle East, Africa, South Asia

New backdoor, familiar actor — the Iran-linked group tracked as Nimbus Manticore has a fresh toolset, and Kaspersky's write-up of NightLedger lands this week.

Flat white line-art of a server management chip sitting beneath a stacked server, one door left ajar, on a deep-teal background — internet-exposed BMC IPMI hash disclosure.

Vulnerabilities

24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login

Twenty-four thousand hash leaks underneath the OS — the BMC exposure map lands this week, and the fix is not a patch but a posture change.

Flat white line-art of an autonomous agent working a console alone beside a government finance building, on a teal background — AI-agent espionage.

Artificial Intelligence (AI)

Hackers Used Autonomous AI Agent to Target Thailand Finance Ministry, Researchers Say

Ten days after Hugging Face — the second autonomous-agent cyber event lands this week.

See all