ThreatVectr
Tag

#network security

37 stories taggednetwork security.

Illustration: a rack-mounted enterprise network appliance with blinking amber and red status lights in a darkened server room
Vulnerabilities

F5's BIG-IP Flaw Was Already Being Exploited Before a Patch Existed

A critical security hole in widely used network hardware is under active attack. Federal agencies have three days to patch. Here's what the flaw does and who is at risk.

3 min read
Network infrastructure diagram displayed on a large monitor with nodes highlighted in red, representing affected telecommunications routing systems with severit
Vulnerabilities

Cisco Patches Eight Flaws in Network Software Used by Telecoms Worldwide, Two Rated Near-Maximum Severity

Cisco's own engineers found the vulnerabilities using artificial intelligence tools. No fixes exist beyond the patches, and two of the flaws score 9.8 out of 10 on the standard severity scale.

4 min read
A network infrastructure diagram showing Fortinet firewall and switch devices infected with remote-control malware, attack vectors highlighted in red, with gove
Vulnerabilities

Hackers Are Exploiting a Fortinet Flaw to Plant Remote-Control Malware on Network Devices

A security bug in Fortinet's firewall and switch software is being used to silently take over devices and steal data. More than 178 machines are already infected, attacks have been running since at least July 2026, and the US government is telling federal agencies they have three days to patch.

3 min read
Illustration: A dimly lit enterprise server room at night
Vulnerabilities

Cisco's Network Gatekeeper Has a Perfect-10 Flaw and Hackers Are Already Inside

A zero-day in Cisco Identity Services Engine lets anyone on the internet walk past the login screen entirely. Federal agencies have three days to patch. There is no workaround.

3 min read
A MikroTik router with indicator lights glowing on a network rack, surrounded by terminal windows showing unauthorized access logs
Vulnerabilities

Hackers Are Taking Over MikroTik Routers Left Open on the Internet

Poland's national cyber team warns that criminals are grabbing full control of MikroTik routers through an exposed remote-access service, with attacks running since at least early September.

3 min read
A Cisco Nexus switch rack glowing with network activity indicators, critical warning messages displayed on adjacent monitoring station screens showing code exec
Vulnerabilities

Cisco patches critical Nexus 9000 bug that lets attackers run code as root

A flaw tracked as CVE-2026-20212 scores 9.8 out of 10. Cisco also shipped a bundled fix for seven separate IOS XR bugs, two of them equally severe, with no workaround available.

4 min read
A firewall management console displaying multiple critical vulnerability alerts at severity level 9
Vulnerabilities

WatchGuard Patches Five Critical Flaws That Could Let Attackers Seize Control Remotely

WatchGuard has fixed more than two dozen vulnerabilities in its firewall software and management tools, including five rated 9.3 out of 10 in severity.

3 min read
A network operations center with multiple screens showing Cisco router interfaces, authentication logs scrolling rapidly, some entries marked as tampered or del
Threat Intelligence

China-Linked 'Fire Ant' Crew Breaks Into Cisco Routers to Steal Passwords and Hide Its Tracks

Sygnia says the espionage group has jumped from VMware servers to core network gear, tampering with logs and siphoning credentials from TACACS authentication servers.

4 min read
A security timeline visualization showing the shrinking window between public vulnerability disclosure and active exploit availability, with hours marked in red
Vulnerabilities

Microsoft says the patching window is shrinking fast. Here is what that means for ordinary people.

Software flaws are being turned into working attacks within hours of being made public. Microsoft says companies can no longer patch their way out fast enough, and is pushing a network-level defensive layer to buy time.

4 min read
A technician in a data center cuts through a thick network cable with industrial shears, sparks flying, server racks illuminated in the background during an eme
Threat Intelligence

Zombie Cards, Cut Cables, and a Botnet: The Week's Cybercrime Stories You May Have Missed

T-Mobile physically severed a network cable to stop an active intrusion, a new Linux botnet called Evooo1Bot is spreading across hijacked servers, and Threema's encrypted messaging service was knocked offline by a DDoS attack. Here is what happened.

3 min read
A network operations center with multiple large displays showing Cisco infrastructure components and security dashboards with critical alert notifications highl
Vulnerabilities

Cisco Patches Four Maximum-Severity Flaws in Crosswork Network Software

Fifteen vulnerabilities fixed across Cisco products, with three scoring a perfect 10 out of 10 on the standard severity scale. None are known to be exploited yet.

3 min read
A network traffic analyzer dashboard with cascading data streams and highlighted vulnerabilities, showing file upload processes and access control bypass attemp
Vulnerabilities

Six flaws in CISA's own Malcolm network tool let low-level users run code and slip past access checks

The US cyber agency's open-source traffic analyzer, used by defenders worldwide, shipped with a file-upload bug that hands attackers a shell as the web user, plus two authorization gates that fall open on a simple URL trick.

4 min read
A security operations center with multiple screens displaying firewall software interfaces, with red alert notifications and authentication bypass warnings high
Vulnerabilities

Fortinet Patches Eight Flaws, Including Two That Let Attackers Log In Without Real Credentials

Two high-severity bugs in Fortinet's security products could let criminals talk their way past login screens they should never be able to reach.

3 min read
A SonicWall security platform interface on a monitor marked as deprecated or retired, with critical vulnerability patches being applied to legacy infrastructure
Vulnerabilities

SonicWall Patches Critical Flaws in a Security Platform It Already Retired

Two vulnerabilities scored near-perfect danger ratings and could let criminals break into systems without a password. One of the affected products was officially shut down last October.

3 min read
A network diagram showing router NAT tables and TCP session connections being hijacked and redirected, with attackers' interception points highlighted in the da
Vulnerabilities

NatJack: New Attack Hijacks TCP Sessions by Abusing Network Address Translation

Researcher Malcolm Stagg showed at Black Hat USA 2026 how to twist NAT tables to steal live connections, fake DNS answers, and unmask hidden users.

4 min read
© 2026 Threat Vectr