Most compromises do not rely on advanced techniques or cutting-edge tools. Cyber threat actors scan the internet looking for exposed, well-known software vulnerabilities to exploit. Basic security failures enable most compromises and organizations can reduce their risk by addressing these underlying weaknesses and prioritizing vulnerabilities for action based on the …
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
- CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability
- CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability …
Advisory at a Glance
| Title | A Tale of Two SOCs: Insights From Two Red Team Assessments |
|---|---|
| Original Publication | August 25, 2026 |
| Executive Summary |
The Cybersecurity and Infrastructure Security Agency (CISA) conducted simultaneous red team assessments at … |
Summary
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized administrative access, disclose sensitive information, modify device configuration, hijack authenticated sessions, and disrupt device operation.
The following versions of Ebyte NE2-D11 are affected:
- NE2-D11 Firmware FW-9167-0-11
Summary
Successful exploitation of these vulnerabilities could allow an attacker to alter device settings.
The following versions of FURUNO FA-50 Class B AIS Transponder are affected:
- FURUNO FA-50 Class B AIS Transponder vers:all/*
| CVSS | Vendor | … |
|---|
Summary
Successful exploitation of this vulnerability could allow an attacker to access sensitive information and override user permissions.
The following versions of Rently Smart Home are affected:
- Smart Home <=20.1.0
| CVSS | Vendor | Equipment | Vulnerabilities | …
|---|
Summary
Successful exploitation of these vulnerabilities could allow an attacker to cause the loss of ABS functions, steering assist, speedometer, shifting capabilities, or disable automatic traction control.
The following versions of Bendix EC80 Brake ECU are affected:
- EC80ESP+ J1708 Z228999
- EC80ESP+ 6S/6M …
Summary
Successful exploitation of this vulnerability could allow a remote, authenticated or unauthenticated attacker to disclose sensitive information, arbitrarily modify the device to cause a denial of service, or alter a devices displayed image.
The following versions of PayRange API are affected:
- PayRange …