Security news.
Today's security landscape is dominated by critical infrastructure attacks and high-severity zero-day disclosures across enterprise hardware and core open-source components. Exploitation campaigns targeted network switches and refrigeration networks, while developers face critical vulnerabilities spanning hypervisors, web frameworks, and base Linux package management. Multiple breach reports also highlight sustained threat actor interest in hosting environments and credential stores.
Zyxel Patches Zero-Day Exploited to Breach 1,000 Switches
Zyxel resolved an actively exploited zero-day vulnerability in its GS1900 series switches that allowed attackers to steal credentials and configuration files from nearly 1,000 devices.
CISA Adds Exploited WordPress RCE Flaw to KEV Catalog
CISA issued a warning to federal agencies regarding active, in-the-wild exploitation of a recently patched high-severity remote code execution flaw in WordPress.
Debian and Ubuntu APT Flaw Enables Root Code Execution
A vulnerability in the APT package manager allows man-in-the-middle attackers to swap verified packages and execute arbitrary code as root when APT retries failed downloads.
Xen Hypervisor Flaws Allow Inter-VM Memory Access
Two unmitigated security vulnerabilities in the Xen hypervisor spanning versions 4.6 onward permit malicious guest virtual machines to read and write the memory of arbitrary co-hosted VMs, including dom0.
Critical Rails Flaw Enables Arbitrary Server File Overwrites
The Ruby on Rails project released updates for versions 8.1.4.1 and 8.0.5.2 to address an Active Storage vulnerability that allows unauthenticated file writing via crafted ImageMagick uploads.
Barracuda ESG Bug Chain Opens Path to Root Access
Attackers can chain an authentication bypass with a command injection flaw on Barracuda Email Security Gateway appliances to achieve full root-level compromise.
DreamHost Data Breach Compromises FTP Logins and Webmail
DreamHost alerted customers after malicious actors maintained unauthorized access to its File Manager service for two months, exfiltrating FTP/SFTP credentials and active webmail sessions.
Cyberattack Impacts Critical French Blood Storage Facilities
A cyber intrusion targeting a refrigeration system vendor altered cooling and defrost parameters across three storage centers operated by France's national blood service.