Intelligence desk
Network Security
A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.
Zyxel GS1900 patch status no longer proves safetyVulnerability Management
Ivanti's first October patch is no longer enoughVulnerability Management
KeyDrift turns SD-WAN controllers into key-collection implantsNetwork Security
PHP2Shell moves from patch emergency to PAN-OS compromise responseIncident Response
SonicWall SMA 1000 exploitation turns an edge patch into an incident decisionVulnerability Management
N-Tron switch flaws require an engineering-led availability decisionOperational Technology
Exploited Cisco SD-WAN bypass turns patching into a compromise investigationVulnerability Management
NetScaler zero-days turn patching into an incident-response decisionVulnerability Management
F5 BIG-IP APM exploitation requires hunting, not patch-only closureVulnerability Management
F5 BIG-IP APM OAuth zero-day demands patching and compromise assessmentVulnerability Management
Check Point management zero-day requires compromise hunting, not patch-only closureVulnerability Management
Cisco ISE zero-day requires patching and compromise reviewVulnerability Management
Check Point VPN flaws expose gateways and management serversNetwork Security
Cisco confirms active exploitation against the firewall management planeVulnerability Management
SonicWall SMA 1000 zero-days demand compromise checks, not patch-only closureVulnerability Management
PaperCut Release 3 supersedes earlier fixes as exploitation continuesVulnerability Management
PaperCut’s Sunday indicators make compromise review mandatoryVulnerability Management
PaperCut zero-day requires isolation, patching and compromise reviewVulnerability Management
CISA adds six exploited flaws; NetScaler gateways need immediate triageVulnerability Management
QTFY disruption exposes the weakness of source-IP trustNetwork Security
Calix router flaw can turn a trusted NAT boundary into public exposureVulnerability Management
TrueConf Server exploitation requires more than an upgrade ticketVulnerability Management
CISA’s ransomware designation changes the SMA1000 closure standardVulnerability Management
Polish incident exposes private APNs as cross-site paths into operational technologyOperational Technology
LightSpy’s new footprint puts routers inside the spyware incident boundaryThreat Intelligence
Cisco FMC zero-day requires hunting and secret rotation, not patching aloneVulnerability and Network Security
Arista VeloCloud Orchestrator zero-day puts SD-WAN control planes on an incident footingVulnerability and Network Security
Actively exploited Arista flaw exposes the SD-WAN control planeNetwork and Infrastructure Security
Check Point exploitation makes management-plane verification a Monday priorityNetwork and Perimeter Security
Exploited Check Point bypass puts firewall policy integrity in questionNetwork and Security Platforms
The state of the router is now a critical-infrastructure questionGeopolitics & infrastructure