SecurityWeek reports that attackers are already exploiting a critical SonicWall flaw in SMA1000 appliances days after it was disclosed. SonicWall says customers should update 6210, 7210, and 8200v models to versions 12.5.0-03082 or 12.4.3-03670. The bug could let a remote attacker direct the appliance to issue requests on their behalf and reach internal functionality.
Source: securityweek.com
…
Help Net Security reports that Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity flaw, CVE-2026-96940. The bug may let authenticated attackers read emails and attachments of other users in the same organization, so Exchange Server admins should install the update as soon as possible.
Source: helpnetsecurity.com
The Register reports that researchers found two characters that can trick Chromium browsers into showing lookalike URLs as genuine web addresses. The issue affects Chromium-based browsers such as Chrome and Edge, and the fake domains can bypass browser safety checks. Windows users should update their browser when a fix is available and be careful with links that look like familiar sites but use unusual characters.
Source: theregister.com
SecurityWeek reports that Citrix is urging immediate patching of a critical NetScaler vulnerability that could lead to remote code execution or denial of service. The flaw affects NetScaler ADC and NetScaler Gateway appliances in specific SAML configurations, as well as Secure Private Access Hybrid deployments. Citrix says it is not aware of unmitigated exploits, but users should update to the fixed versions as soon as possible.
Source: securityweek.com
