CISA Flags Actively Exploited Check Point Zero-Day That Hands Attackers Root
CISA has added a Check Point Gaia OS flaw to its Known Exploited Vulnerabilities catalog after confirming real-world attacks against roughly two dozen customers. The bug lets a...
Barracuda Confirms Hackers Are Chaining Two Email Gateway Bugs for Full Root Access
Barracuda says a small number of customers have already been hit by attackers combining two vulnerabilities in its Email Security Gateway to gain root-level access without authentication. The...
Legacy VNC Login on macOS Screen Sharing Could Hand Attackers a Root Shell
Researchers found that macOS's Screen Sharing service kept its file-transfer helpers running as root even when a session was authenticated with nothing more than a shared VNC password....
State-Sponsored Hackers Exploit Cisco Catalyst SD-WAN Manager Zero-Day to Gain Root Access
A state-sponsored threat actor exploited zero-day CVE-2026-20245 in Cisco Catalyst SD-WAN Manager to gain root access via a malicious CSV upload. The multi-phase intrusion also leveraged two CVSS...