Network Security

Network Security | News, how-tos, features, reviews, and videos

Cisco SD-WAN Manager hit by zero-day admin access attack

Attackers are exploiting a critical authentication bypass in Cisco Catalyst SD-WAN Manager to access its API as an administrator.

By Shweta Sharma

1 Oct 20264 mins

Network SecurityVulnerabilitiesZero-Day Vulnerabilities

Can we jail a superintelligence?

By Arjun Mullick

30 Sep 20269 mins

Application SecurityData and Information SecurityNetwork Security

OpenAI pauses AI model training after another agent bypasses network restrictions

By Anirban Ghoshal

29 Sep 20265 mins

Artificial IntelligenceIT GovernanceNetwork Security

NetScaler admins told to patch critical zero-days in ADC and Gateway now

By Shweta Sharma

28 Sep 20264 mins

Network SecurityRemote Access SecuritySecurity

GitLab issue email’s only security is obscurity

By Shweta Sharma

25 Sep 20265 mins

Code SecurityCommunications SecurityEmail Security

WordPress patches a critical severity security vulnerability

By Evan Schuman

25 Sep 20267 mins

Internet SecurityNetwork SecurityVulnerabilities

On-prem VeloCloud Orchestrator under attack, only some versions patched

By Shweta Sharma

24 Sep 20264 mins

Network SecuritySecurity

Aviation solved the vigilance problem. AI just gave security a worse one

24 Sep 20266 mins

Network SecuritySecurity SoftwareThreat and Vulnerability Management

Check Point hacked: The security software protecting your network has become a prime attack target

24 Sep 20267 mins

Network SecuritySecurityVulnerabilities

Articles

F5 fixes actively exploited zero-day flaw in BIG-IP APM

The critical remote code execution vulnerability was added to CISA’s KEV, with more than 15,000 deployments potentially at risk.

By Lucian Constantin

24 Sep 2026 3 mins

Network SecurityVulnerabilitiesZero-Day Vulnerabilities

Cisco patches max-severity ISE flaw, the second critical zero-day this week

Under active exploitation, the 10.0 Identity Services Engine vulnerability can give attackers root privileges without authentication.

By Lucian Constantin

18 Sep 2026 3 mins

Network SecurityVulnerabilitiesZero-Day Vulnerabilities

Critical Cisco Secure Email Gateway zero-day gives attackers root access

‘A root-level, unauthenticated RCE in an email gateway is about as good a foothold as an attacker gets.’

By Lucian Constantin

16 Sep 2026 3 mins

Communications SecurityEmail SecurityNetwork Security

Update your firewall rules: Teams and Copilot are changing address

Two popular Microsoft services will be redirected to new URLs, causing problems for enterprises if their firewalls and gateways don’t follow along.

By Maxwell Cooter

12 Sep 2026 2 mins

Application SecurityNetwork SecuritySecurity

The Future of Network Detection and Response

Network Detection and Response continues to evolve beyond its original role to achieve greater accuracy, scalability and automation. What can we expect to see? Read on for more.

By Hillstone Networks

10 May 2022 4 mins

Network Security

ConnectWise patches critical ScreenConnect authentication failure after five days

The company seeks to reassure users after revealing a new vulnerability.

By Maxwell Cooter

12 Sep 2026 2 mins

Network SecurityRemote Access SecurityZero-Day Vulnerabilities

MikroTik patches flaws currently being exploited to take over routers

MikroTrick chains together two of six patched vulnerabilities to obtain root privileges on MikroTik devices with SSH exposed to the internet, of which they are more than 120,000.

By Lucian Constantin

10 Sep 2026 4 mins

Network SecuritySecurityVulnerabilities

Cisco bundles fixes for multiple vulnerabilities, some critical, into one patch

The patch addresses two critical vulnerabilities and five other high-severity bugs impact Cisco’s carrier-grade routing OS, with potential paths to RCE and unauthorized access.

9 Sep 2026 6 mins

Network SecuritySecurityVulnerabilities

CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting production

Disabling a protocol, limiting S7 communications or updating firmware can close an attack path. It can also disconnect an HMI, engineering station or remote I/O. Operators need a dependency-led change plan, not a generic security checklist.

By Sabine Frömling

9 Sep 2026 8 mins

Network SecuritySecurity HardwareThreat and Vulnerability Management

Back-to-back N-able bugs send admins on a patching spree

N-able is asking admins to patch against a CVSS 10.0 zero-day in its N-central RMM platform, a day after disclosing and patching two other vulnerabilities affecting the product.

By Shweta Sharma

7 Sep 2026 4 mins

Network SecurityRemote Access SecurityZero-Day Vulnerabilities

SonicWall reports two major security holes under active exploit

The company said there are no defensive workarounds for the flaws that include one enabling unauthenticated remote attacks; it has issued patches.

By Evan Schuman

3 Sep 2026 5 mins

Network SecuritySecurityVulnerabilities

China-linked hackers turn Cisco routers into covert attack infrastructure

Fire Ant’s compromise of TACACS servers and manipulation of router telemetry shows how control of core network systems can leave defenders with incomplete evidence while exposing paths toward sensitive connected networks.

By Prasanth Aby Thomas

1 Sep 2026 5 mins

CyberattacksCybercrimeNetwork Security

Citrix issues critical security updates for its NetScaler devices

A memory overflow vulnerability and an authentication bypass both require urgent attention.

By Evan Schuman

21 Aug 2026 5 mins

Access ControlAuthenticationIdentity and Access Management

Explore a topic

Show me more

Google makes Gemini 4 AI model available to a trusted few

By Nidhi Singal

1 Oct 20265 mins

Artificial IntelligenceSecurity

Why AI agents are like the dog that pushed kids into the Seine

1 Oct 20266 mins

Access ControlData and Information SecurityIT Governance

Unsloth’s model picker had a code-execution problem

By Shweta Sharma

30 Sep 20264 mins

Artificial IntelligenceCode SecurityDevelopment Tools

Why Email Still Works for Attackers

By Joan Goodchild

1 Oct 20266 mins

The Evolving CISO: AI, Leadership and the Future of Cybersecurity

By Joan Goodchild

25 Sep 20266 mins

Why Security Debt May Be a Bigger Risk Than Security Spend

By Joan Goodchild

11 Sep 202616 mins

Why Email Still Works for Attackers

By Joan Goodchild

1 Oct 20266 mins

The Evolving CISO: AI, Leadership and the Future of Cybersecurity

By Joan Goodchild

25 Sep 20266 mins

Why Security Debt May Be a Bigger Risk Than Security Spend

By Joan Goodchild

11 Sep 202616 mins