Infrastructure

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation. The vulnerability, a Read original

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation. The vulnerability, a Read original

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation. The vulnerability, a Read original

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation. The vulnerability, a Read original

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation. The vulnerability, a Read original

n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process Source: The Hacker News n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n’s February fix for CVE-2026-27577 for another bypass. The affecte Read original

n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process Source: The Hacker News n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n’s February fix for CVE-2026-27577 for another bypass. The affecte Read original

Show HN: CheapSecurity – Lightweight, Self-Hosted CCTV for Linux SBCs Source: Hacker News Points: 129 Discussion: Hacker News Comments Read original

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication Source: The Hacker News A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill’s “get_log_file” endpoint ("/ Read original

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication Source: The Hacker News A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill’s “get_log_file” endpoint ("/ Read original