Latest in Bugs, Outages and Security

1,023 words

CVE-2026-62290: CVE-2026-62290: ClusterIssuer DNS01 Solver Policy Bypass and Credential Exfiltration in cert-manager

CVE-2026-62290: ClusterIssuer DNS01 Solver Policy Bypass and Credential Exfiltration in cert-manager Vulnerability ID: CVE-2026-62290 CVSS Score: 7.3 Published: 2026-10-29 CVE-2026-62290 is an incorrect authorization vulnerability (CWE-863) in cert-manager that allows low-privileged Kubernetes namespace tenants to bypass ClusterIssuer DNS01 solver policies and exfiltrate cluster-scoped DNS credentials.

2w agotech.yahoo.com

290 words

SonicWall SMA 1000’s Latest SSRF Door Was Being Walked Through Within 24 Hours of Disclosure

On October 6, SonicWall issued advisory SNWLID-2026-0017. The bulletin stated plainly: "There is currently no evidence any of the vulnerabilities addressed in this release are being exploited in the wild." Within 24 hours, the Previdian honeypot network detected exploitation attempts targeting the…

10m agotechtarget.com

796 words

Microsoft fixes SSRF vulnerabilities found in Azure services

Orca Security, which discovered the Azure flaws, warned enterprises to be aware of SSRF attacks, which can result in a threat actor accessing or modifying sensitive data. Orca Security discovered four Azure services were vulnerable to server-side request forgery flaws…

1h agodev.to

1,419 words

25 firewalls rooted from 19,000 scanned. I did the funnel math.

Dream Research published an attack report this week that reads like a funnel teardown: an attacker scanned roughly 19,000 internet-facing Palo Alto PAN-OS firewalls and ended up with root on 25 of them, including a US government-affiliated organization's internal network. The report…

6h ago

1,054 words

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that…

1h agodarkreading.com

798 words

Slack's Incoming Webhooks Can Be Weaponized in Phishing Attacks

Researchers report how attackers could weaponize a feature in the Slack collaboration platform to access corporate data and messages. Security researchers exploring attack vectors in collaboration platform Slack have discovered a way its Incoming Webhooks could be leveraged to launch…

2h agodev.to

1,014 words

CVE-2026-115909: CVE-2026-115909: Unbounded Symlink-Target Allocation Causes Process Abort in Rust zip Crate

CVE-2026-115909: Unbounded Symlink-Target Allocation Causes Process Abort in Rust zip Crate Vulnerability ID: CVE-2026-115909 CVSS Score: 7.5 Published: 2026-10-29 A vulnerability in the Rust zip crate (versions 1.3.0 prior to 9.0.0) allows an attacker to trigger an uncatchable process abort via a crafted ZIP archive.

2h agodev.to

582 words

Nagios Core CGI Exposure: Authentication Is Not Enough Without Command Authorization

Nagios Core provides monitoring status through CGI programs that can also submit commands to the Nagios daemon. The distinction matters during an exposure review. A page that shows host and service status may appear to be read-only, while a nearby…

2h agodev.to

557 words

Why Astro's Native `security.csp` Breaks on Shiki

Whenever I mention my astro-strict-csp package, the first question developers usually ask is: "Wait, doesn't Astro already have built-in security.csp in astro.config.mjs?" It does—and Astro's native security.csp is actually the exact reason I still needed…

2h agodev.to

107 words

PHP Security Alert: Mitigating the New Unpatched RCE Vulnerability

The PHP security team has issued a warning regarding a new remote code execution (RCE) vulnerability that currently lacks an official patch. While the flaw does not affect all PHP installations, it poses a significant risk to systems running certain…

Bugs, Outages and Security

Bugs, Outages and Security in Programming: the news, the names and what changed.

21 Tracked terms
Last 30 days Feed window

Search within this topic Ask AI about this topic All topics

What this topic collects on

An article joins this feed when it matches these terms. Each one is also a search of its own.

Latest in Bugs, Outages and Security

Bugs, Outages and Security

What this topic collects on

Related topics