Taiwan Retailer Pauses Online Store as Cyberbiz Vendor Incident Is Assessed
The company says it has not been notified of similar access and is still assessing its exposure. Read more
Category: Identity & Governance
Zabbix Agent DLL Loading Flaw CVE-2026-59781: Affected Versions and Fixes
JVN#42011956 reports a DLL loading vulnerability, CVE-2026-59781, in Zabbix agent from Zabbix LLC. Versions before 6.0.48, 7.0.29 and 7.4.13 are listed. The advisory says improper installation permissions may let an unauthorized DLL load and code run with administrator privileges. It advises updating to the latest version. Read more
November 2026 Android Security Update Patches 216 Vulnerabilities Across Core
Google released its November Android security update on November 2, patching 216 vulnerabilities: 119 in Android core components and 97 in third-party elements. The update includes 23 critical-severity and 193 high-risk flaws, with the most dangerous vulnerability in the Framework component allowing remote code execution without user interaction. Read more
CISA Warns of Critical Vulnerabilities in EPICS Base Control System Software
CISA released an ICS advisory warning of four vulnerabilities in EPICS Base release 7.0.10 and prior. Successful exploitation could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code across worldwide critical manufacturing deployments. Users are advised to update to release 7.0.11. Read more
Siemens Patches Authentication Bypass Flaw in Mendix SAML Module
Siemens has addressed an authentication bypass vulnerability, tracked as CVE-2026-89209, in its Mendix SAML module. The flaw allows an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens and CISA advise updating affected versions or applying mitigations across Critical Manufacturing and Information Technology environments deployed worldwide. Read more
CISA Warns of Critical Flaws in Guangzhou Juan IoT Technology EseeCloud IP Camera Firmware
CISA issued advisory ICSA-26-288-02 regarding three vulnerabilities in Guangzhou Juan IoT Technology Co., Ltd. EseeCloud App and Firmware, which could allow an attacker to gain control over affected IP cameras. The vendor did not respond to CISA's coordination attempts, and the flaws include a critical hard-coded credential vulnerability that allows an attacker to log in to EseeCloud devices across worldwide deployments. Read more
F5 Products Face Multiple Vulnerabilities with Public PoC for DoS Flaw
GovCERT.HK issued a High Threat Security Alert for multiple vulnerabilities in F5 Products, including a denial-of-service flaw (CVE-2026-39979) with publicly available proof-of-concept exploit code, affecting specific versions of F5OS, F5OS-A, and F5OS-C, with potential for DoS or information disclosure. Read more
Operation QUICSILVER Exploits Graduation Lures and QUIC Backdoor in Myanmar Cyber Espionage Campaign
Cybersecurity researchers have identified Operation QUICSILVER, a China-nexus espionage campaign targeting Myanmar’s government and IT sectors since April 2026. The attack uses fake graduation ceremony invitations to deliver QUICAgent, a Go-based backdoor that abuses legitimate Windows binaries and communicates via QUIC over UDP port 443 to evade detection. Read more
F5 Issues Advisory for Privilege Escalation Flaw in BIG-IP and F5OS Products
F5 has released a security advisory addressing a privilege escalation vulnerability (CVE-2025-20028) affecting multiple versions of BIG-IP and F5OS systems, with patches now available for immediate deployment. Read more
Research Digest: Assessing Attack Surfaces in Generative Search Engines through Publisher Attributes in Political Domains
A new study evaluates how generative search engines (GSEs) are vulnerable to poisoning attacks by analyzing publisher authority and personalization effects, finding that ruling parties face broader attack surfaces than opposition parties in U.S. and Japan political domains, and that user profiles have minimal influence on citation behavior. Read more