CVE-2026-19490 โ Citrix NetScaler Authentication: patch Citrix NetScaler Authentication and verify the fix held.
CVE-2025-25249 โ Fortinet Multiple Products Heap-based Buffer Overflow: patch Fortinet Multiple Products Heap-based Buffer Overflow and verify the fix held.
CVE-2026-87491 โ Google Chromium V8 Out of Bounds Write: patch Google Chromium V8 Out of Bounds Write and verify the fix held.
CVE-2026-20079 โ Cisco Firewall Management Center Authentication: patch Cisco Firewall Management Center Authentication and verify the fix held.
CVE-2026-75650 โ Adobe Commerce and Magento: patch Adobe Commerce and Magento and verify the fix held.
๐ง Engineering & Research Digest
The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE: patch The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE and verify the fix held.
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities: patch Active exploitation of Cisco Secure Firewall Management Center vulnerabilities and verify the fix held.
Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise: on our radar; correlate it with the rest of your feed.
Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it: we file this against the daily watch โ relevant if it's in your stack.
Introducing the CyberAgents Exchange AI Inspector: Rigorous review for community: we weigh this against how agents actually fail in prod.
Full categorized item feed is available for the most recent digests. This day's briefs above are the complete published summary.Message Now