VulnHub

Real-time Cybersecurity News

CISA warns of max severity Ubiquiti flaws exploited in attacks

BleepingComputer
Actively Exploited
Vulnerability

Overview

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about serious vulnerabilities in Ubiquiti UniFi OS and Lantronix serial-to-ethernet servers that are currently being exploited by hackers. These flaws could allow attackers to gain unauthorized access and control over affected systems. The vulnerabilities pose a significant risk to users, including businesses and organizations relying on these technologies for network management. CISA emphasizes the urgency for affected users to take immediate action to protect their networks from potential breaches. Prompt updates and patches are essential to mitigate these risks and secure vulnerable systems.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Affected Systems: Ubiquiti UniFi OS, Lantronix serial-to-ethernet servers
  • Action Required: Users should apply the latest patches and updates provided by Ubiquiti and Lantronix to secure their systems.
  • Timeline: Newly disclosed

Original Article Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi OS and Lantronix serial-to-ethernet servers. [...]

Impact

Ubiquiti UniFi OS, Lantronix serial-to-ethernet servers

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Users should apply the latest patches and updates provided by Ubiquiti and Lantronix to secure their systems.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Vulnerability.

Read Original Article

Related Coverage

Researchers Trick AI Browsers Into Leaking Credentials

Infosecurity Magazine

Researchers from LayerX have successfully tricked AI browsers, including ChatGPT Atlas and Comet, into revealing sensitive user credentials. By exploiting weaknesses in the systems' guardrails, they demonstrated that these AI tools could be manipulated to bypass security measures designed to protect user data. This incident raises significant concerns about the reliability of AI-driven applications, especially as they become more integrated into daily online activities. Users of these AI browsers should be aware of the potential risks and take extra precautions when sharing sensitive information. The findings suggest that AI systems need stronger safeguards to prevent similar exploits in the future.

Jun 24, 2026

Securing the service desk: Why social engineering attacks keep succeeding

BleepingComputer

Service desks are increasingly targeted by attackers who use social engineering tactics to gain access to sensitive corporate accounts. These attackers often request password resets or multi-factor authentication changes, exploiting the trust that service desk staff typically have in callers. Researchers at Specops Software explain how these attacks are executed and emphasize the need for stronger security measures. Organizations are urged to implement rigorous verification processes to protect against these manipulative tactics. This is crucial because successful attacks can lead to significant data breaches and unauthorized access to critical systems.

Jun 24, 2026

FortiBleed campaign steals 110M credentials from FortiGate targets

SCM feed for Latest

A recent cybersecurity campaign, dubbed FortiBleed, has compromised around 110 million user credentials by targeting FortiGate devices. The attackers utilized a tool called FortigateSniffer, which exploits a diagnostic utility to continuously monitor network traffic, allowing them to capture sensitive information. This incident raises significant concerns for organizations using FortiGate products, as the compromised credentials could lead to further breaches or unauthorized access. The scale of the data theft is alarming, making it imperative for affected users to take immediate action to secure their accounts. Companies using FortiGate devices should review their security protocols and consider implementing additional protective measures to prevent future incidents.

Jun 24, 2026

Critical Ubiquiti Vulnerabilities in Attackers’ Crosshairs

SecurityWeek

Recent vulnerabilities discovered in Ubiquiti products pose significant risks as they allow remote attackers to access systems without authentication. These flaws enable unauthorized changes to be made to the system, access to underlying accounts, and the injection of malicious commands. This could lead to serious security breaches for users, particularly affecting those who rely on Ubiquiti for their networking equipment. Organizations using these products need to act quickly to safeguard their systems and data. Given the nature of these vulnerabilities, it is crucial for users to stay informed and apply any necessary updates or patches to mitigate the risks.

Jun 24, 2026

Agentic AI Security: Wrong Context, Wrong Decisions at Machine Speed

SecurityWeek

The article discusses the importance of context in AI systems, particularly in agentic AI, which makes decisions autonomously. Without the right context, these systems can make poor decisions at high speeds, leading to potential security risks. This issue is crucial for organizations using AI for critical operations, as incorrect decisions could have serious consequences. The piece emphasizes the need for developers and companies to ensure their AI systems are trained with accurate and comprehensive context to mitigate these risks. As AI continues to be integrated into various sectors, understanding and addressing these contextual challenges is vital for maintaining security and reliability.

Jun 24, 2026

Iran-Linked MuddyWater Poses as Ransomware Gang to Mask Cyber Espionage

Infosecurity Magazine

A recent report from NCC Group reveals that a group of state-backed Iranian hackers, known as MuddyWater, is disguising its cyber espionage activities by posing as a ransomware gang. Instead of demanding ransom payments, these attackers are using commercially available malware to infiltrate and steal sensitive information from their targets. This tactic not only complicates detection efforts but also blurs the lines between traditional ransomware attacks and espionage operations. Organizations need to be aware that these actors are leveraging the chaos surrounding ransomware to mask their true intentions. This approach poses significant risks to national security and corporate confidentiality, as it allows these hackers to operate under the radar while compromising valuable data.

Jun 24, 2026