A newly discovered vulnerability, identified as CVE-2026-75501, affects Calix routers running the EXOS/6.6.47 firmware. This flaw allows remote attackers to potentially expose home networks, raising significant security concerns for users of these devices. The issue lies in how the firmware handles certain requests, which could lead to unauthorized access to sensitive network data. Home users with these routers should be particularly vigilant, as this vulnerability could make their networks easier targets for cybercriminals. It's crucial for affected users to take immediate action to secure their devices and prevent potential breaches.
WhatsApp is enhancing its account security with the introduction of multiple passkeys and a more robust two-step verification process. These features aim to provide users with better protection against unauthorized access to their accounts. The update is part of WhatsApp's ongoing efforts to improve security, especially as the platform continues to grow in popularity. Users will benefit from these added layers of security, making it harder for attackers to compromise their accounts. This move is particularly important given the increasing number of phishing attempts and account takeovers targeting messaging apps.
Marimo has fixed a serious security flaw in its notebook software that could allow attackers to run unauthorized commands. This vulnerability, identified by VulnCheck's CVE Numbering Authority, enables an attacker to execute Model Context Protocol (MCP) commands when a specially crafted notebook is opened in edit mode. If exploited, this could lead to unauthorized actions on a user's system, particularly affecting individuals using the notebook software in environments where sensitive data is handled. Users are urged to update their software promptly to mitigate potential risks associated with this flaw.
Hackers have compromised over 270 Zimbra servers by exploiting a serious vulnerability in the Zimbra Collaboration Suite (ZCS). This vulnerability allows for remote code execution, putting organizations that rely on Zimbra at significant risk. The attacks are ongoing, and the scale of the breach indicates that attackers are actively targeting these systems. Companies using Zimbra should take immediate action to secure their servers to prevent further exploitation. It is crucial for affected users to stay informed and apply any available patches as soon as possible to mitigate the risk of unauthorized access.
Check Point Research recently reported on a series of significant security breaches affecting critical infrastructure and the emergence of new AI-related attack methods. These breaches pose serious risks to various sectors, highlighting vulnerabilities that attackers may exploit. The report, released on August 24, emphasizes the need for organizations to bolster their defenses against these evolving threats. As cybercriminals continue to adapt their strategies, it is crucial for companies to stay informed and proactive in their cybersecurity measures. This situation underscores the importance of vigilance in protecting sensitive systems and data from increasingly sophisticated attacks.
CISA has added a new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, specifically CVE-2026-60004, which is a code injection vulnerability in Gitea. This vulnerability is being actively exploited and poses significant risks, particularly to federal agencies. In response, CISA has emphasized the urgency for federal agencies to prioritize the remediation of this high-risk vulnerability, as it can grant attackers total control over affected systems. While the directive primarily targets Federal Civilian Executive Branch agencies, CISA encourages all organizations to adopt similar risk-based vulnerability management practices. The agency will continue to update the KEV Catalog with vulnerabilities that meet its criteria, and organizations are encouraged to report any known exploits not currently listed.
The Cybersecurity and Infrastructure Security Agency (CISA) has released an advisory based on findings from Red Team exercises aimed at helping organizations better understand their vulnerabilities and improve their incident response strategies. These exercises simulate real-world attacks to identify weaknesses in systems and processes, enabling companies to assess their risk and prepare for potential threats. The advisory emphasizes the importance of proactive measures, such as regular security assessments and employee training, to defend against various cyber threats. Organizations that take these findings seriously can enhance their security posture and reduce the likelihood of successful attacks. This advisory is particularly relevant as cyber threats continue to evolve and become more sophisticated.
Ebyte's NE2-D11 firmware, version FW-9167-0-11, has multiple serious vulnerabilities that could allow attackers to gain unauthorized access and control over devices. Issues include inadequate authentication, cleartext transmission of sensitive information, and weaknesses in session management, which could lead to unauthorized configuration changes and data breaches. The vulnerabilities, which have a CVSS score as high as 9.8, affect critical sectors like manufacturing and energy, and their impact is global. Ebyte has acknowledged the problems and is working on a patch, but there has been little communication about its status. Users are advised to contact Ebyte for updates and to implement security measures in the meantime.
Rently Smart Home has a critical vulnerability affecting versions 20.1.0 and earlier, which allows attackers to access sensitive information, including Master Pins, and override user permissions. This issue arises from insufficiently protected credentials. The vulnerability is particularly concerning for users in commercial facilities and information technology sectors across the United States and India. Rently has addressed this flaw with a patch released in late June 2026, meaning users do not need to take any additional action. However, organizations are still encouraged to improve their cybersecurity measures to mitigate risks associated with such vulnerabilities.
A serious vulnerability has been discovered in the PayRange API, affecting all versions of the product. This flaw allows both authenticated and unauthenticated attackers to access sensitive information about devices on the PayRange network. They could potentially modify device settings, leading to service disruptions or altered device displays. The vulnerability is attributed to a lack of proper authorization on management endpoints, making device details publicly accessible. PayRange has not yet collaborated with CISA to address this issue, and users are encouraged to reach out to their customer support for guidance. Given the nature of this vulnerability, it poses a significant risk to users in the commercial facilities sector across the United States and Canada.
A serious vulnerability has been identified in Zoneminder, a popular surveillance software, affecting versions 1.37.48 and 1.38.3. This flaw allows authenticated users with permission to view events to execute arbitrary commands on the server through an OS command injection in the event export functionality. While no active exploitation has been reported, the potential for remote code execution poses significant risks to users. Zoneminder recommends that users upgrade to version 1.38.3 or later to mitigate this issue. Organizations utilizing this software should act promptly to protect their systems from possible attacks.
Siemens has identified a serious vulnerability in its SIMATIC IoT2050 Advanced devices that run Industrial OS with Node-RED installed. The flaw arises from a lack of authentication on the Node-RED HTTP interface, which could allow remote attackers to access and manipulate system commands on the server without any authentication. This means they could create harmful flows and execute arbitrary code with full system privileges. Siemens has urged users to update their devices to version 4.3.4.1 or later to mitigate this risk. The affected devices are used across various critical infrastructure sectors, including chemical, manufacturing, energy, and transportation, highlighting the need for immediate action to protect against potential exploitation.
FURUNO Electric has issued a warning regarding vulnerabilities in its FA-50 Class B AIS Transponder, affecting all versions of the device. These vulnerabilities could allow an attacker with knowledge of hard-coded credentials to alter critical device settings. Notably, the product has not received updates since production ended in October 2020, leaving users at risk. FURUNO advises against connecting the device directly to the internet and recommends securing the vessel to prevent unauthorized access. The vulnerabilities have been documented as CVE-2026-59769 and CVE-2026-67578, with a CVSS score of up to 9.1, indicating a critical level of severity. Users of this device need to take immediate action to mitigate potential exploitation.
Bendix has identified critical vulnerabilities in its EC80 Brake ECU, which could allow attackers to disrupt essential vehicle functions like ABS, steering assist, and traction control. The affected versions include multiple models such as EC80ESP+ and EC80ESP PLC across various configurations. These vulnerabilities stem from issues like stack-based buffer overflows, out-of-bounds writes, and the use of hard-coded credentials. Users of the affected products are urged to update their firmware to the latest versions to mitigate these risks. This situation is particularly concerning as it affects vehicle safety systems, making prompt action crucial for those using the impacted equipment.
Researchers have uncovered a cybersecurity campaign involving 24 npm packages that serve as phishing tools. These packages redirect users to fake CAPTCHA pages that mimic legitimate Cloudflare prompts, tricking users into providing sensitive information. While the packages themselves contain harmless HTML, the intent is to exploit npm's infrastructure to deceive unsuspecting users. This tactic raises concerns about the safety of open-source package repositories and how they can be misused for malicious purposes. Developers and users of npm should be cautious and ensure they verify the packages they download to avoid falling victim to such schemes.