Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws.
The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws appeared first on SecurityWeek.
https://www.securityweek.com/cisco-watchguard-release-patches-sonicwall-wont-fix-gms-flaws/
Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.
The post Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day appeared first on SecurityWeek.
https://www.securityweek.com/zyxel-switch-hacks-blamed-on-patched-flaw-actually-exploited-a-zero-day/
Google has expanded its Cloud Vulnerability Reward Program (VRP) with a new $250,000 top-tier reward for security weaknesses that could lead to full administrative control.
The premier payout is “specifically designed to recognize high-impact architectural research” and will be handed out to researchers who can demonstrate gaining ‘roles/owner’ privileges or complete IAM control over arbitrary Google Cloud organizations or projects.
According to the internet giant, to qualify for the reward, the exploit path should not depend on pre-existing access to a project, previously compromised credentials, or user interaction/social engineering.
Reports that demonstrate remote code execution (RCE) in Borg (Google’s underlying production infrastructure) or root-in-production will also be evaluated for the new $250,000 root-in-cloud reward.
“Because code execution in Borg has the potential to impact service availability or cross-tenant data, researchers must halt all probing immediately upon achieving any execution in Borg. Escalation, extracting production credentials, and lateral movement are not allowed and will result in researcher disqualification,” Google Cloud CISO Chris Betz said.
The company has added the root-in-cloud validation criteria to its Cloud VRP page, explaining that it will award the bug bounty if its analysis of the initial entry point, execution context, and attack surface demonstrates that full arbitrary tenant or project takeover is possible.
“Identifying tenant-isolation bypasses and complex cross-service logic flaws requires human creativity, intuition, and rigorous systems analysis combined with the power of agentic systems,” Betz noted.
According to Michael Cote, Google Cloud’s vulnerability reward program lead, first-time researchers who combine their own intuition with agentic tools are finding more interesting bugs, on average, than novices did two years ago.
He also pointed out that finding bugs eligible for the new root-in-cloud tier requires deep architectural intuition and AI.
“High incentives require clear, safe rules of engagement. We never want researchers testing exploits against real customer projects. Instead, we created a deterministic proof-of-root mechanism using a designated service account. Researchers can cryptographically prove unauthorized access against that identity,” Cote said.
Related: Google Partially Reverses Chrome Bug Bounty Cuts
Related: Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports
Related: Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers
Related: Will AI Kill the Bug Bounty Industry?
https://www.securityweek.com/google-introduces-250000-root-in-cloud-bug-bounty-reward/
Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.
The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek.
https://www.securityweek.com/php2shell-attacks-root-palo-alto-firewalls-but-fail-against-wordpress/
Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.
The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.
https://www.securityweek.com/fresh-wordpress-vulnerability-in-attackers-crosshairs/
Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.
The post Drupal Commerce Core Vulnerability Exploited Against Online Stores appeared first on SecurityWeek.
https://www.securityweek.com/drupal-commerce-core-vulnerability-exploited-against-online-stores/
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek.
https://www.securityweek.com/max-severity-gitlab-vulnerability-exploited-against-alpine-linux/
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.
The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines appeared first on SecurityWeek.
https://www.securityweek.com/teamviewer-flaw-could-let-malicious-hosts-take-over-support-technicians-machines/
Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet.
The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek.
https://www.securityweek.com/mirai-botnet-operators-join-php2shell-attacks-as-aslr-bypass-exploits-emerge/
The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.
The post Attackers Exploit Third Arista VCO Zero-Day in Four Months appeared first on SecurityWeek.
https://www.securityweek.com/attackers-exploit-third-velocloud-orchestrator-zero-day-in-four-months/