Arista patches actively exploited VeloCloud Orchestrator zero-day

Arista patches actively exploited VeloCloud Orchestrator zero-day

Arista Networks has released security patches for a zero-day vulnerability that is being actively exploited and impacts on-prem deployments of VeloCloud Orchestrator (VCO). VCO is a cloud-based centralized management platform that helps administrators configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated edge devices. Tracked as CVE-2026-93952This maximum severity error is due … Read more

Check Point Patches Exploited Management Server Zero-Day

Check Point Patches Exploited Management Server Zero-Day

Check Point on Tuesday announced urgent patches for a critical-severity vulnerability in the Management Server that was exploited in the wild as a zero-day vulnerability. The vulnerability, tracked as CVE-2026-93616 (CVSS score 9.8), is described as a directory traversal and file upload issue that could allow unauthenticated attackers to upload and execute arbitrary scripts on … Read more

Gyazo server flaw was exploited to steal 23.6 million user records

Gyazo server flaw was exploited to steal 23.6 million user records

Image sharing platform Gyazo has confirmed that a data breach has occurred after hackers exploited a server vulnerability that allowed them to steal 23.6 million user records. Gyazo is a cloud-based screenshot and screen recording tool from Helpfeel that automatically uploads users’ screenshots to the cloud and provides them with a shareable link for sharing … Read more