Networks & Firewalls
Firewalls, VPNs, routers and switches: the exploited flaws on the edge of your network and the fixed versions to install.
White House Residential Proxy Traffic: Researchers Logged 236 Exits on the Presidential Network, What Is Confirmed and How to Check Your Own
Researchers logged 236 residential proxy exits through six White House network addresses in 30 days. Here is what is confirmed, what is not known, and how to check whether the same software is running on your company network.
Poly EagleEye Cube Vulnerability CVE-2026-39430: Critical Login Bypass in the USB Meeting Room Camera, No Fix Listed, and What to Do Now
CVE-2026-39430 means the HP Poly EagleEye Cube USB camera on firmware 1.3.1-001267 does not enforce its admin login, and its exported settings contain credentials. No fix is listed yet. Here is what is confirmed and what to do this week.
SonicWall SSLVPN Vulnerability CVE-2026-19868: Exploited Flaw May Let Attackers Get Past SAML and MFA, and the Fixed Versions to Install
CISA says attackers are exploiting CVE-2026-19868 in SonicWall SonicOS SSL VPN. The flaw may let a valid login for another sign-in method get past SAML and the MFA tied to it. SonicOS 7.3.4-7015 and 8.2.3-8015 list the fix.
Smart TV Tracking Opt-Out: Study Finds Samsung and Vizio TVs Keep Sending ACR Traffic After Users Opt Out, and How to Lock Them Down
Northeastern University researchers tested 12 smart TVs. On Samsung and Vizio models, turning off ACR tracking did not stop traffic to ACR servers. Here is what is confirmed, what is not, and how to lock down TVs on a business network.
Plex2Shell QNAP NAS Attacks: Hackers Are Breaching NAS Devices Through Plex Media Server, and Why Updating to 1.43.3.10861 Is Not Enough
QNAP says attackers are compromising NAS devices through Plex2Shell, a chain of four exploited Plex Media Server flaws. Update to 1.43.3.10861, and if Plex was reachable from the internet, treat the NAS as compromised.
D-Link DGS-3130 Vulnerability: Unpatched Switch Flaws in the Discovery Protocol, No Firmware Fix Yet, and How to Disable DDP
D-Link says its DGS-3130-30TS managed switch has several unpatched flaws, mostly in the D-Link Discovery Protocol. No firmware fix exists yet. Here is what is confirmed, what is not, and the workaround to apply this week.
Residential Proxy on Employee Devices: The White House Network Was for Rent, and How to Check Yours
Researchers say White House internet addresses could be rented through residential proxy services for a month. Here is what is confirmed, what is not, and how to check whether your office network is being rented out too.
Cisco UCS Central Vulnerability CVE-2026-76506: Logged-In Users Could Run Commands on Your Server Management Console, Update to 2.1(2c)
Cisco has fixed CVE-2026-76506, a high-severity flaw in UCS Central Software. Anyone with a low-privileged login could run commands, write files or read sensitive data. There is no workaround, and the fix is 2.1(2c).
Cisco ISE Vulnerability CVE-2026-20241: Attackers With No Login Can Obtain Endpoint Identity Certificates, and the Patch Level to Check
Cisco says a flaw in ISE and ISE-PIC lets an attacker with no login obtain an endpoint identity certificate. There is no workaround. Here are the fixed patches and how to check yours.
