Infrastructure Security Archives • Daily CyberSecurity

Patch Now: Apache CloudStack Plugs Proxmox and KVM Exploits in New LTS Release

CloudStack VM Hijacking Apache CloudStack Security Update CVE-2024-42062 and CVE-2024-42222 - Apache CloudStack

Patch Now: Apache CloudStack Plugs Proxmox and KVM Exploits in New LTS Release

Do Son May 11, 2026

Urgent: Apache CloudStack patches critical flaws (CVE-2026-25199, CVE-2026-25077) enabling VM hijacking and KVM host RCE. Secure your cloud environment now.

Cisco CNC and NSO Flaw Allows Remote Attackers to Lock Down Network Management Cisco NSO Denial of Service CVE-2026-20188

Cisco CNC and NSO Flaw Allows Remote Attackers to Lock Down Network Management

Do Son May 7, 2026

Cisco warns of a critical DoS flaw (CVE-2026-20188) in CNC and NSO. Unauthenticated attackers can freeze network management. Patch to CNC 7.2 or NSO 6.4.1.3 now!

Critical JWT Bypass in Convoy Panel Allows Full Account Takeover Convoy Vulnerability JWT Authentication Bypass

Critical JWT Bypass in Convoy Panel Allows Full Account Takeover

Do Son April 7, 2026

A critical 9.8 CVSS flaw in Convoy (CVE-2026-33746) allows unauthenticated admin access via forged JWTs. Update to v4.5.1 immediately to secure your KVM.

The Cloud in Flames: AWS Bahrain Fire Signals a New Era of Kinetic Strikes on Tech Infrastructure Amazon Redshift JDBC Driver RCE CVE-2026-8178 AWS Bahrain fire 2026 AWS UAE data center fire Amazon North Korean hacker keystroke latency, Arizona laptop farm infiltration

Amazon Redshift JDBC Driver RCE CVE-2026-8178 AWS Bahrain fire 2026 AWS UAE data center fire Amazon North Korean hacker keystroke latency, Arizona laptop farm infiltration

The Cloud in Flames: AWS Bahrain Fire Signals a New Era of Kinetic Strikes on Tech Infrastructure

Do Son April 3, 2026

A massive fire at an AWS facility in Bahrain highlights a dangerous shift toward kinetic strikes on cloud infrastructure. Is your multi-region strategy ready?

Nasir Security’s Hybrid Warfare Against Middle East Energy Infrastructure Nasir Security Supply Chain Attack

Nasir Security’s Hybrid Warfare Against Middle East Energy Infrastructure

Do Son March 27, 2026

Resecurity uncovers Nasir Security, an Iranian threat actor using supply chain attacks and psy-ops to target Middle East energy vendors and leak blueprints.

Critical 9.8 CVSS Bypass Unearthed in HPE Aruba AOS-CX Switches CVE-2024-42509 & CVE-2024-47460 HPE Aruba Fabric Composer CVE-2026-23592 Aruba AOS-CX CVE-2026-23813

CVE-2024-42509 & CVE-2024-47460 HPE Aruba Fabric Composer CVE-2026-23592 Aruba AOS-CX CVE-2026-23813

Critical 9.8 CVSS Bypass Unearthed in HPE Aruba AOS-CX Switches

Do Son March 11, 2026

HPE Aruba patches a critical 9.8 CVSS bypass in AOS-CX switches that allows unauthenticated password resets. Upgrade to 10.17.1001+ to secure your network now.

Critical Centreon Alert: 9.8 Severity Flaw Exposes IT Monitoring CVE-2024-55573 & CVE-2024-53923 Centreon AWIE Vulnerabilities CVE-2025-15029

Critical Centreon Alert: 9.8 Severity Flaw Exposes IT Monitoring

Do Son January 9, 2026

Centreon warns of critical AWIE vulnerabilities CVE-2025-15029 (CVSS 9.8) & CVE-2025-15026. Update to v25.10.2 now to prevent unauthenticated SQL injection.

CISA KEV Alert: HPE’s Maximum CVSS Score Flaw and a Zombie PowerPoint Bug CISA active exploit catalog known exploited vulnerabilities ActiveMQ RCE CVE-2026-34197 CISA KEV Catalog Actively Exploited Vulnerabilities CISA KEV Catalog CVE-2025-37164 GeoServer XXE, CISA KEV FortiWeb SQLi, CISA KEV Critical Vulnerabilities CVE-2024-20953

CISA active exploit catalog known exploited vulnerabilities ActiveMQ RCE CVE-2026-34197 CISA KEV Catalog Actively Exploited Vulnerabilities CISA KEV Catalog CVE-2025-37164 GeoServer XXE, CISA KEV FortiWeb SQLi, CISA KEV Critical Vulnerabilities CVE-2024-20953

CISA KEV Alert: HPE’s Maximum CVSS Score Flaw and a Zombie PowerPoint Bug

Do Son January 8, 2026

CISA adds critical HPE OneView (CVE-2025-37164) and legacy PowerPoint (CVE-2009-0556) flaws to KEV. FCEB agencies must patch by Jan 28, 2026.

Critical Network Collapse: 9.8 Severity Net-SNMP Buffer Overflow Threatens Global Monitoring Systems Net-SNMP, CVE-2025-68615

Critical Network Collapse: 9.8 Severity Net-SNMP Buffer Overflow Threatens Global Monitoring Systems

Do Son December 24, 2025

CVE-2025-68615: A critical 9.8 severity Net-SNMP buffer overflow allows attackers to crash snmptrapd. Upgrade to v5.9.5 or v5.10.pre2 immediately!