guides
📌Security Roundup Series: Weekend of September 28, 2026 • 4 min read deep dive The weekend disclosures of September 26–28, 2026—spanning dual zero-days in Citrix NetScaler, deserialization RCE in Microsoft SharePoint, and AI-accelerated intrusions—make it clear that perimeter edge devices and core identity systems are under unprecedented strain.
News
📌Security Roundup Series: https://colibrisec.org/security-roundup-f5-bigip-checkpoint-zeroday-velocloud-cisa-kev-week-of-september-25-2026/ • 4 min read deep dive🛡️Vulnerability Intelligence: F5 has released an out-of-band security advisory addressing a critical remote code execution vulnerability in BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127. The flaw allows unauthenticated remote attackers to trigger a heap-based buffer overflow within
News
📌Security Roundup Series: https://colibrisec.org/security-roundup-f5-bigip-checkpoint-zeroday-velocloud-cisa-kev-week-of-september-25-2026/ • 4 min read deep dive🛡️Vulnerability Intelligence: Check Point has issued an urgent security notice detailing CVE-2026-93616, a critical zero-day vulnerability in the web service of Check Point Security Management Server. Discovered during targeted intrusions against enterprise security operations centers, the flaw enables
News
📌Security Roundup Series: https://colibrisec.org/security-roundup-f5-bigip-checkpoint-zeroday-velocloud-cisa-kev-week-of-september-25-2026/ • 4 min read deep dive🛡️Vulnerability Intelligence: Rated with a maximum CVSS 10.0 score, CVE-2026-93952 is a critical improper input validation flaw affecting on-premises VeloCloud Orchestrator (VCO) instances. When certificate-based authentication is enabled, remote adversaries possessing the public key of a VeloCloud
guides
📌Security Roundup Series: https://colibrisec.org/security-roundup-f5-bigip-checkpoint-zeroday-velocloud-cisa-kev-week-of-september-25-2026/ • 4 min read deep dive The widespread exploitation of core network devices—from F5 Application Delivery Controllers and Check Point Management Servers to Arista VeloCloud SD-WAN Orchestrators—demands a fundamental transformation in enterprise edge security. This blueprint outlines engineering strategies to insulate network
News
📌Security Roundup Series: https://colibrisec.org/security-roundup-cisco-asyncos-root-rce-linux-netfilter-kev-pixel-modem-weekend-september-21-2026/ • 4 min read deep dive🛡️Vulnerability Intelligence: Cisco has published an urgent advisory warning of active in-the-wild exploitation targeting a critical vulnerability in Cisco AsyncOS Software for Cisco Secure Email Gateway. Tracked as CVE-2026-76461, this flaw allows unauthenticated remote adversaries to achieve root-level
News
📌Security Roundup Series: https://colibrisec.org/security-roundup-cisco-asyncos-root-rce-linux-netfilter-kev-pixel-modem-weekend-september-21-2026/ • 4 min read deep dive🛡️Vulnerability Intelligence: CISA has added CVE-2026-53266, an out-of-bounds write vulnerability in the Linux kernel netfilter bridge subsystem, to the Known Exploited Vulnerabilities catalog. The flaw allows local unprivileged users or compromised container processes to achieve local privilege escalation
News
📌Security Roundup Series: https://colibrisec.org/security-roundup-cisco-asyncos-root-rce-linux-netfilter-kev-pixel-modem-weekend-september-21-2026/ • 4 min read deep dive🛡️Vulnerability Intelligence: Disclosed as part of Microsoft’s record-setting September 2026 security release, CVE-2026-73009 is a critical CVSS 9.8 Use-After-Free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP). The flaw allows unauthenticated remote attackers to execute
guides
📌Security Roundup Series: https://colibrisec.org/security-roundup-cisco-asyncos-root-rce-linux-netfilter-kev-pixel-modem-weekend-september-21-2026/ • 4 min read deep dive The simultaneous disclosure of zero-day exploits targeting email gateways (Cisco AsyncOS), low-level kernel abstractions (Linux Netfilter), cellular basebands (Google Pixel), and perimeter VPN services (Windows SSTP) underscores a stark reality: perimeter appliances and low-level protocol handlers are high-priority
News
📌Security Roundup Series: https://colibrisec.org/security-roundup-cisco-asyncos-root-rce-linux-netfilter-kev-pixel-modem-weekend-september-21-2026/ • 4 min read deep dive🛡️Vulnerability Intelligence: Google’s September 2026 security bulletin and a subsequent CISA alert confirmed that CVE-2026-58704—a critical authorization bypass vulnerability in Google Pixel cellular modem firmware—has been actively exploited in targeted surveillance operations. Proximal attackers can
en
Technical teardown of CVE-2026-76460 in Cisco ISE: maximum CVSS 10.0 zero-day authentication bypass, root execution, and urgent patch deployment.
en
Technical analysis of VMSA-2026-0007: guest-to-host virtual machine escape flaws (CVE-2026-59346, CVE-2026-59347) in VMware Workstation and Fusion.