RedFlick Gives Star Blizzard a Shorter Route From Phishing to Persistence
Star Blizzard’s RedFlick campaigns turn an email reply into a path toward a protected archive. Defenders need to distinguish mail exposure from endpoint execution.
wolfSSL 5.9.4 Puts Trust State on the Patch Checklist
The 11 fixes in wolfSSL 5.9.4 need an application-level exposure check. Long-lived certificate and session state also belongs in the change plan.
TeamViewer Fixed a Flaw That Could Override Your Session Permissions
TeamViewer fixed five client and host vulnerabilities. The lead flaw could let a remote session bypass permissions the user had explicitly denied.
One Encoded URL Can Hand Attackers Cisco SD-WAN Admin Access
Cisco says attackers are exploiting a critical SD-WAN Manager flaw that turns one encoded HTTP request into administrator-level API access.
Two LightLLM Helper Ports Expose Code Execution on Inference Nodes
Two LightLLM helper services can accept unsafe network input outside the model API. Check multimodal and profiling nodes, their live ports and their network boundaries.
The VPN Server Your Firebox Trusts Could Hand It Root Commands
WatchGuard fixed 15 Fireware vulnerabilities, including a root-command path through a hostile BOVPN over TLS server and adjacent-network code execution.
Two WatchGuard Wireless Flaws Need No Login
Check installed firmware and management reachability. Patch availability does not prove protection.
Your .NET Upgrade Can Pass CI and Still Miss November’s Support Deadline
.NET 8 LTS and .NET 9 STS leave Microsoft support on 10 November. A new SDK and a green build do not prove the production application has moved.
A Stalled DTLS Handshake Could Make OpenSSL Send Heap Memory in Plaintext
OpenSSL fixed a high-severity DTLS flaw that can expose heap memory in plaintext. The condition is narrow, but every branch analysed in the advisory is affected.
Google Cloud Fixed Three Workflow Flaws That Could Reach Its Own Systems
Google’s three September disclosures concerned provider-side fixes already applied in June. A dated update also covers later SubWorkflow and AuthConfig notices and the separate changes to workflow identities.
NeedyMantis Is Hiding Behind Poedit, curl, Vim and TightVNC
Microsoft found NeedyMantis hiding beside legitimate software in targeted intrusions. The real hunt starts before the backdoor appears.
Researchers Read a Linux Root Hash With Spectre Defences Still On
Branch Target Reuse recovered a Linux root hash on Intel test systems, exposing a local JIT weakness that Linux updates now target.