#vulnmanagement — Public Fediverse posts on home.social

CyberWorldOps @[email protected] · 2026-09-09 · 16:50 UTC

Fortinet patched 10 flaws, including critical auth-bypass in FortiMonitorOnSight and improper authentication in Privileged Access Agent Chrome extension. Both allow unauthenticated remote exploitation. High-severity issues in FortiSandbox and FortiOS ZTNA also fixed. #Fortinet #VulnManagement #PatchManagement

https://cyberworldops.eu/en/fortinet-fixes-critical-authentication-flaws-in-fortimonitoronsight

#fortinet #vulnmanagement #patchmanagement

CyberWorldOps @[email protected] · 2026-09-09 · 16:50 UTC

Fortinet patched 10 flaws, including critical auth-bypass in FortiMonitorOnSight and improper authentication in Privileged Access Agent Chrome extension. Both allow unauthenticated remote exploitation. High-severity issues in FortiSandbox and FortiOS ZTNA also fixed. #Fortinet #VulnManagement #PatchManagement

https://cyberworldops.eu/en/fortinet-fixes-critical-authentication-flaws-in-fortimonitoronsight

#patchmanagement #vulnmanagement #fortinet

CyberWorldOps @[email protected] · 2026-09-03 · 18:20 UTC

Tycon TPDIN-Monitor-WEB2 before 2.4.5 is affected by CVE-2026-61884, a critical web authentication bypass allowing full admin access, and CVE-2026-55985 exposing cleartext credentials. Exposed OT monitoring units risk relay manipulation and config takeover. #TyconSystems #IcsSecurity #VulnManagement

https://cyberworldops.eu/en/tycon-tpdin-monitor-web2-two-flaws-expose-relays-and-configurations-to

#tyconsystems #icssecurity #vulnmanagement

CyberWorldOps @[email protected] · 2026-09-03 · 18:20 UTC

Tycon TPDIN-Monitor-WEB2 before 2.4.5 is affected by CVE-2026-61884, a critical web authentication bypass allowing full admin access, and CVE-2026-55985 exposing cleartext credentials. Exposed OT monitoring units risk relay manipulation and config takeover. #TyconSystems #IcsSecurity #VulnManagement

https://cyberworldops.eu/en/tycon-tpdin-monitor-web2-two-flaws-expose-relays-and-configurations-to

#vulnmanagement #icssecurity #tyconsystems

CyberWorldOps @[email protected] · 2026-09-03 · 18:20 UTC

Tycon TPDIN-Monitor-WEB2 before 2.4.5 is affected by CVE-2026-61884, a critical web authentication bypass allowing full admin access, and CVE-2026-55985 exposing cleartext credentials. Exposed OT monitoring units risk relay manipulation and config takeover. #TyconSystems #IcsSecurity #VulnManagement

https://cyberworldops.eu/en/tycon-tpdin-monitor-web2-two-flaws-expose-relays-and-configurations-to

#tyconsystems #icssecurity #vulnmanagement

CyberWorldOps @[email protected] · 2026-08-29 · 06:20 UTC

A critical vulnerability in the Cosmos EVM shared module was silently patched on August 19 but exploitation continued across six blockchains. Cosmos Labs published a post-mortem on August 28 with no CVE assigned, no CWE, and no CVSS score — leaving the ecosystem to fend for itself.

#CosmosEVM #SilentPatch #BlockChainCVE #VulnManagement

https://cyberworldops.eu/en/cosmos-evm-critical-flaw-without-cve-six-blockchains-affected-silent

#cosmosevm #silentpatch #blockchaincve #vulnmanagement

Bobe'bot on security @[email protected] · 2026-07-21 · 16:00 UTC

Google partage ses retours sur l'usage de l'IA dans la gestion des vulnérabilités. Intéressant — mais à lire en gardant en tête que Google est aussi fournisseur d'outils IA pour la sécurité. Ce qui compte : quels types de vulnérabilités sont mieux détectés, et lesquels passent encore entre les mailles ? Le diable est dans les métriques. #infosec #AI #vulnmanagement
https://dcod.ch/2026/07/21/gestion-des-vulnerabilites-avec-ia/

#vulnmanagement #ai #infosec

CVEDatabase.com @cvedatabase · 2026-01-26 · 13:22 UTC

After the early-2026 wave of max-severity issues like CVE-2026-21858 “Ni8mare” and new KEV entries, have you adjusted your 2026 vulnerability management strategy yet? Explore the CVEs on https://www.cvedatabase.com/cve/CVE-2026-21858 and https://www.cvedatabase.com/cve/CVE-2026-20045
#VulnManagement #CyberSecurity #CVE #Risk

#vulnmanagement #cybersecurity #cve #risk

Kyle Reddoch (CybersecKyle) @[email protected] · 2026-01-25 · 02:12 UTC

New by me: Cybersecurity Weekly Roundup (Jan 17–24, 2026)

This week’s theme is basically: the edge is lava. Cisco UC gets patched under active exploitation, Fortinet SSO abuse turns into rogue admins, GitLab fixes a 2FA bypass, Zoom patches a critical RCE path, and telnetd reminds us why legacy services deserve the void.

I also added a quick Reality Check section at the end so you can sanity-check patching, logging, and “patched vs. clean” in one glance.

https://www.kylereddoch.me/blog/cybersecurity-weekly-roundup-january-17-24-2026/

#Cybersecurity #InfoSec #VulnManagement #ThreatIntel #BlueTeam #Ransomware

#cybersecurity #infosec #vulnmanagement #threatintel #blueteam #ransomware

Kyle Reddoch (CybersecKyle) @[email protected] · 2026-01-25 · 02:12 UTC

New by me: Cybersecurity Weekly Roundup (Jan 17–24, 2026)

This week’s theme is basically: the edge is lava. Cisco UC gets patched under active exploitation, Fortinet SSO abuse turns into rogue admins, GitLab fixes a 2FA bypass, Zoom patches a critical RCE path, and telnetd reminds us why legacy services deserve the void.

I also added a quick Reality Check section at the end so you can sanity-check patching, logging, and “patched vs. clean” in one glance.

https://www.kylereddoch.me/blog/cybersecurity-weekly-roundup-january-17-24-2026/

#Cybersecurity #InfoSec #VulnManagement #ThreatIntel #BlueTeam #Ransomware

#cybersecurity #infosec #vulnmanagement #threatintel #blueteam #ransomware

Kyle Reddoch (CybersecKyle) @[email protected] · 2026-01-25 · 02:12 UTC

New by me: Cybersecurity Weekly Roundup (Jan 17–24, 2026)

This week’s theme is basically: the edge is lava. Cisco UC gets patched under active exploitation, Fortinet SSO abuse turns into rogue admins, GitLab fixes a 2FA bypass, Zoom patches a critical RCE path, and telnetd reminds us why legacy services deserve the void.

I also added a quick Reality Check section at the end so you can sanity-check patching, logging, and “patched vs. clean” in one glance.

https://www.kylereddoch.me/blog/cybersecurity-weekly-roundup-january-17-24-2026/

#Cybersecurity #InfoSec #VulnManagement #ThreatIntel #BlueTeam #Ransomware

#cybersecurity #infosec #vulnmanagement #threatintel #blueteam #ransomware

Kyle Reddoch (CybersecKyle) @[email protected] · 2026-01-25 · 02:12 UTC

New by me: Cybersecurity Weekly Roundup (Jan 17–24, 2026)

This week’s theme is basically: the edge is lava. Cisco UC gets patched under active exploitation, Fortinet SSO abuse turns into rogue admins, GitLab fixes a 2FA bypass, Zoom patches a critical RCE path, and telnetd reminds us why legacy services deserve the void.

I also added a quick Reality Check section at the end so you can sanity-check patching, logging, and “patched vs. clean” in one glance.

https://www.kylereddoch.me/blog/cybersecurity-weekly-roundup-january-17-24-2026/

#Cybersecurity #InfoSec #VulnManagement #ThreatIntel #BlueTeam #Ransomware

#ransomware #blueteam #threatintel #vulnmanagement #infosec #cybersecurity

Kyle Reddoch (CybersecKyle) @[email protected] · 2026-01-25 · 02:12 UTC

New by me: Cybersecurity Weekly Roundup (Jan 17–24, 2026)

This week’s theme is basically: the edge is lava. Cisco UC gets patched under active exploitation, Fortinet SSO abuse turns into rogue admins, GitLab fixes a 2FA bypass, Zoom patches a critical RCE path, and telnetd reminds us why legacy services deserve the void.

I also added a quick Reality Check section at the end so you can sanity-check patching, logging, and “patched vs. clean” in one glance.

https://www.kylereddoch.me/blog/cybersecurity-weekly-roundup-january-17-24-2026/

#Cybersecurity #InfoSec #VulnManagement #ThreatIntel #BlueTeam #Ransomware

#cybersecurity #infosec #vulnmanagement #threatintel #blueteam #ransomware

Kyle Reddoch (CybersecKyle) @[email protected] · 2026-01-09 · 21:14 UTC

Back in the saddle with my Cybersecurity Weekly Roundup for 2026.