Hackers are exploiting an operating system command entry vulnerability in SiteGuard Server Edition’s web application firewall (WAF), which allows them to execute commands with ROOT or SYSTEM privileges on affected computers. The security issue is tracked as CVE-2026-106931 and affects the statistics feature in host-based WAF instances, which is enabled by default. SiteGuard is a … Read more
Article written by Vakaris Noreika, Vice President of Product Research and Development at NordLayer Monday morning you’re managing an organization’s security, and suddenly your security tools report private ChatGPT usage on a managed laptop, even though your organization pays for ChatGPT Enterprise. Wondering what the employee submitted to ChatGPT. This could be a public job … Read more
Over the weekend, Citrix rushed out patches for two critical NetScaler zero-day vulnerabilities that have already been exploited. The company’s advisory covers eight vulnerabilities affecting NetScaler ADC and NetScaler Gateway, including remote code execution, HTTP request smuggling, DoS, and security bypass issues. The two zero days for them Citrix confirmed the exploitation are tracked as … Read more