The Signal
Must Know
Exploitation · Securityaffairs
What happened
Dell System Update (DSU) versions before 2.3.0.0 contain CVE-2026-86360, a critical path-traversal vulnerability that can enable unauthenticated attackers with remote access to execute arbitrary code with root privileges on unpatched PowerEdge servers. [5]
Dell also addressed CVE-2026-86361 and CVE-2026-86362, which could let low-privileged local attackers gain higher privileges through incorrect permissions or access controls. [5]
Why it matters
Successful exploitation may provide filesystem access, complete compromise of the vulnerable application and underlying operating system, and full control of the affected server. [5]
Exploitation · Helpnetsecurity
What happened
CISA added CVE-2026-88779 to its Known Exploited Vulnerabilities catalog; it is described as a memory overflow affecting Citrix NetScaler ADCs and Gateways. [4]
Citrix reported observing targeted attacks against unmitigated NetScaler deployments that can cause denial of service. [4]
Why it matters
If the condition is triggered repeatedly, the NetScaler service may remain unavailable, according to Citrix. [4]
Cloud · Theregister Security
What happened
Vercel CEO Guillermo Rauch said the company confirmed a KVM zero-day through its Sandbox bounty program, describing it as affecting Linux virtualization; public technical details were not yet available. [1]
The report identifies Vercel Sandbox as using Firecracker MicroVMs, which relies on Linux KVM; AWS created Firecracker. [1]
Why it matters
The reported issue is characterized as a guest-to-host escape: a guest-VM operator could potentially take over the host and possibly control other guest VMs. [1]
AI & Agents · Arstechnica Security
What happened
AI-agent adoption is creating opportunities for attackers to induce malicious actions, including exfiltration of database contents and sensitive business or personal information. [2]
Google and four other organizations acknowledged vulnerabilities in which one agent inside a targeted network could spread harmful instructions to other internal agents. [2]
Why it matters
Agents may pass instructions to other agents because their guardrails can be lax, while the receiving agent explicitly trusts the sending agent and follows its directions. [2]
Exploitation · Securityaffairs
What happened
FortiGuard Labs reported ClingSTUN, a Linux backdoor targeting unpatched, internet-exposed IoT and network devices, initially including Hytec Inter routers and later devices from more than a dozen vendors. [3]
After exploitation, a downloader installs the hardware-specific malware; supported architectures include ARM, MIPS, PowerPC and Intel. [3]
Why it matters
The back-connect proxy backdoor uses public STUN services to discover mapped addresses and ports, maintain NAT bindings, and support connections between compromised hosts and operators. [3]
Also Worth Knowing
AI & Agents · Malwarebytes Labs
What happened
Google temporarily stopped accepting submissions to its open-source OSS VRP bug bounty program after a significant rise in automated submissions, which it said were mostly invalid. [6]
Security research programs need to distinguish discovery automation from validated reporting; otherwise reviewer capacity becomes a control point. [6]
Security · Cyberscoop
What happened
The Operational Technology Cybersecurity Coalition recommends that CISA issue a binding operational directive focused on federal operational technology security, including defined agency responsibility, existing federal guidance, and minimum cybersecurity practices. [7]
The proposal treats ownership and visibility as foundations for applying common OT safeguards. [7]
Vulnerability · Securityaffairs
What happened
The FBI removed an Accenture contractor after a security failure on a third-party-managed platform exposed sensitive personal data belonging to thousands of FBI employees. [8]