Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Ep. 87 - Citrix NetScaler Zero-Days: Code Execution on Your Edge Box, No Login, No Special Config

Oct 14, 2026 By SafeBreach In SafeBreach
Two Citrix NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, were exploited in the wild before a patch existed, and 88771 hits every configuration with no login required. Tova Dvorin and Adrian Culley break down Citrix bulletin CTX697096 and all eight CVEs, why this is NetScaler’s third CISA KEV entry in five weeks, and why patching won’t tell you whether you were already breached.
View Video
veracode

CISO Risk Intel Brief: Record Patch Volume, Edge Zero-Days, and AI-Accelerated Supply Chain Pressure

Oct 14, 2026 By Andrea Mazzarini In Veracode
This briefing examines material developments across the most recent seven-day period and the preceding thirty days. It is written for executive and board consumption and focuses on residual risk, control effectiveness, material exposure, and the practical implications for application security programs, software supply chain integrity, edge and identity systems, and the accelerating role of AI in both attack and defense.
Read Post
Corelight

CVE-2026-70111: How Corelight uncovered a 0-Day affecting Microsoft Distributed File System

Oct 13, 2026 By Travis Green & Labs Team In Corelight
In the process of fuzzing MS-RPC and Distributed File System (DFS) APIs, we discovered a one-packet mechanism set to crash an entire Windows server, which the Microsoft Security Response Center (MSRC) later assigned as CVE-2026-70111.
Read Post
detectify

How to detect non-CVE vulnerabilities that standard scanners miss

Oct 12, 2026 By Detectify In Detectify
If your application security program only tracks known Common Vulnerabilities and Exposures (CVEs), you’re probably missing a large share of your real risk. Across the Detectify platform, 75% of the vulnerabilities in our test catalog and 99% of those we discover in customers’ assets are non-CVE vulnerabilities. That makes public disclosures a poor measure of coverage on a modern attack surface. Below, we look at why so many vulnerabilities never get a CVE and how Detectify finds both kinds.
Read Post
seemplicity

Seemplicity + Miggo: Runtime Detection, Closed Risk

Oct 11, 2026 By Kevin Swan In Seemplicity
Most application-layer attacks slip past EDR, WAFs, and CNAPP because none of them watch what an app actually does at runtime. Miggo’s ADR platform does, detecting behavioral deviations agentlessly via DeepTracing and eBPF. With the new integration, those runtime detections flow directly into Seemplicity, where they’re correlated with cloud, code, and identity findings, deduplicated, and routed to the right owner.
Read Post
cycognito

Emerging Threat: (CVE-2026-107406) NetScaler ADC and Gateway Remote Code Execution via SAML

Oct 11, 2026 By Igal Zeifman In CyCognito
CVE-2026-107406 is a memory overflow vulnerability in NetScaler ADC and NetScaler Gateway, classified as CWE-119. Successful exploitation leads to remote code execution or denial of service. The vulnerability carries a CVSS v4.0 base score of 9.5 (Critical). Attack vector is network, and neither privileges nor user interaction are required.
Read Post
manageengine

5 patch essentials: The SMB benchmark for patch management

Oct 10, 2026 By Mahanya V In ManageEngine
If you're the entire IT team at your company, you probably wear more hats than your title suggests. Between helpdesk tickets, network maintenance, and strategic projects, patch management often gets pushed to the background—and it probably wins your attention only after an incident or an audit. The problem is, threats don't wait for a quiet day. New vulnerabilities are piling up and exploit windows are shorter than ever.
Read Post

Ep. 85 - FortiBleed: The Campaign With No CVE That Locks You Out of Your Own Firewall

Oct 9, 2026 By SafeBreach In SafeBreach
The FBI and US Secret Service just dropped joint advisory JCSA 2026-1601 on FortiBleed—and there is no CVE to patch. Tova Dvorin and Adrian Culley walk the full chain: credential stuffing against internet-facing FortiGate SSL VPNs, legacy SHA-256 admin hashes cracked on rented GPUs, fake vendor-style admin accounts, and attackers deleting your accounts to lock you out of your own firewall. Plus the INC/Lynx ransomware link, what the 86,000 figure really means, and the question that matters: would a new admin on your edge device at 3am fire anything?
View Video
seemplicity

How to Build the Business Case for ASPM Software

Oct 8, 2026 By Jessica Amado In Seemplicity
Start with what the current backlog already costs: analyst hours spent on triage, developer time lost to duplicate tickets, slow MTTR, and manual reporting. Then tie each benefit of ASPM software to one of those costs, such as fewer tickets per fix or faster remediation. Compare pricing models on your real numbers, including integration upkeep, and propose a measurable pilot on five to ten high-value applications. Most AppSec teams don’t need to be sold on ASPM software.
Read Post
sentrium

Critical Bookly IDOR Leads to Booking Disclosure and Deletion (CVE-2026-93399)

Oct 8, 2026 By Theklis Stefani In Sentrium
During independent security research conducted as part of the Wordfence Bug Bounty Program, we identified an unauthenticated Insecure Direct Object Reference (IDOR) vulnerability in Bookly, a WordPress appointment booking plugin used to manage online scheduling, services, staff availability and customer appointments.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.