Cybersecurity News — Top-Secured

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

SonicWall SSL VPN: a flaw that bypasses SAML and MFA is being exploited, CISA warns

CISA added CVE-2026-19868, a flaw in the SSL VPN service of SonicWall SonicOS firewalls, to its catalogue of actively exploited vulnerabilities on 6 November 2026. A user holding …

SonicWallVPNFirewall

Vulnerability Critical

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

BeyondTrust has fixed CVE-2026-102764, a critical flaw in Remote Support that lets an attacker with no account perform file operations on the appliance. According to Google and Ma…

BeyondTrustRemote accessLinux

Citrix NetScaler — CVE-2026-88771 · 88772 · 88779

Vulnerability Critical

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Two pre-authentication flaws in NetScaler ADC and Gateway (CVE-2026-88771 and CVE-2026-88772, CVSS 9.5) were exploited before any fix existed and are now used by many attacker gro…

CitrixVPN

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories Vulnerabilities

SciLinux: SLSA-2021-2989-1 Important: lasso on SL7.x x86_

lasso: XML signature wrapping vulnerability when parsing SAML responses (CVE-2021-28091) For more details about the security issue(s), including the impact, a …

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 33: lasso 2021-508acb11

CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS: DLA-2684-1: lasso security upda

A vulnerability was discovered in lasso, a library for Liberty Alliance and SAML protocols, which results to a improper verification of a cryptographic signatu…

Linux