home.social

Search

8 results for “ssvc”

  1. ssvc @ssvc

    In late September, 2026, CrowdStrike's Counter Adversary Operations team collaborated with the United States Federal Bureau of Investigation (FBI) to disrupt several laptop farms operating across the U.S. maintained by DPRK-nexus adversary FAMOUS CHOLLIMA to fraudulently employ operatives at American companies while concealing their true location and identity.

    justice.gov/opa/pr/justice-dep
    crowdstrike.com/en-us/blog/fbi

    #threatintel #northkorea #fbi #famouschollima #doj
  2. ssvc @ssvc

    Placeholder CISA blog post about Ivanti Connect Secure zero-day CVE-2026-104935 and Microsoft Windows Shell Security Feature Bypass zero-day CVE-2026-96951

    cisa.gov/news-events/alerts/20

    #cisa #kev #eitw #zeroday #patchtuesday
  3. ssvc @[email protected]

    Microsoft Patch Tuesday with an exploited zero-day: CVE-2026-96951 (8.8 high) Windows Shell Security Feature Bypass Vulnerability
    msrc.microsoft.com/update-guid

    #microsoft #zeroday #CVE #PatchTuesday #eitw

    #microsoft #zeroday #cve #patchtuesday #eitw
  4. ssvc @ssvc

    Fortinet has around 11 advisories. Stand outs are

    • CVE-2026-106173 (9.4 critical) path traversal in FortiSIEM leads to RCE
    • CVE-2026-107656 (9.6 critical) authentication bypass in FortiSandbox GUI

    No exploitation mentioned.

    fortiguard.fortinet.com/psirt/
    fortiguard.fortinet.com/psirt/

    #fortinet #cve #patchtuesday
  5. ssvc @ssvc

    Volexity has identified active in-the-wild exploitation of a vulnerability chain allowing unauthenticated remote code execution in Ivanti Connect Secure VPN devices. Ivanti has published an advisory (CVE-2026-104935) providing upgrade instructions to customers. Systems exhibiting signs of compromise, such as attempts to move laterally originating from the ICS VPN device, should be forensically investigated to ensure no breach has occurred.

    volexity.com/blog/2026/10/13/a

    #ivanti #volexity #ivanticonnectsecure #zeroday #kev #eitw
  6. ssvc @ssvc

    Volexity has identified active in-the-wild exploitation of a vulnerability chain allowing unauthenticated remote code execution in Ivanti Connect Secure VPN devices. Ivanti has published an advisory (CVE-2026-104935) providing upgrade instructions to customers. Systems exhibiting signs of compromise, such as attempts to move laterally originating from the ICS VPN device, should be forensically investigated to ensure no breach has occurred.

    cc: @GossiTheDog

    volexity.com/blog/2026/10/13/a

    #ivanti #volexity #ivanticonnectsecure #zeroday #kev #eitw
  7. ssvc @ssvc

    Ivanti Connect Secure zero-day CVE-2026-104935

    We are aware of exploitation in the wild affecting a limited number of customers at the time of disclosure.

    hub.ivanti.com/s/article/Secur

    #ivanti #ics #zeroday #eitw #cve
  8. ssvc @ssvc

    GitLab security advisory. The standout CVE is a 10.0 critical CVE-2026-97229 - Integer Overflow issue in CI/CD Regular Expression Compiler impacts GitLab CE/EE

    docs.gitlab.com/releases/patch

    #gitlab #cve
Share on Mastodon

Enter the server where you have an account.