INTELLIGENCE BEAT15 Briefs

Critical Infrastructure

15 Briefs

Energy, telecommunications, government networks, and core utilities defense

Filter:

CISA7 Cisco2 Google2 Amazon1 Citrix1 Microsoft1 SonicWall1

GoogleAnalysis1 min read

Node.js patches critical Brotli decoder buffer overflow vulnerability

What happened.The Node.js project published emergency security updates across all active release lines to patch a critical out-of-bounds write buffer overflow vulnerability within the bundled Google Brotli compression decoder.

Why it matters.Node.js powers microservice edge gateways, API routers, and server-side rendering pipelines that routinely decompress untrusted user requests. Infrastructure teams must update Node container runtimes and backend worker images to patched releases before public exploit scripts proliferate.

Read Full Brief →

Source:GitHub Security Advisories

All Stories14 stories

CISAAnalysis1 min read

CISA adds exploited Palo Alto Networks PAN-OS management flaw to KEV catalog

What happened.CISA added an actively exploited remote code execution vulnerability in the Palo Alto Networks PAN-OS management interface to its Known Exploited Vulnerabilities catalog.

Source:CISA Known Exploited Vulnerabilities

CISAAnalysis1 min read

CISA and AWS issue urgent warnings over critical PHP2Shell remote code execution

What happened.CISA and Amazon Web Services published urgent security advisories warning organizations to patch two critical memory corruption vulnerabilities in core PHP that enable unauthenticated remote code execution.

Source:CISA

CISAAnalysis1 min read

CISA adds Plex2Shell remote code execution exploit chain to Known Exploited Vulnerabilities catalog

What happened.CISA added four chained vulnerabilities impacting Plex Media Server to its Known Exploited Vulnerabilities catalog after confirming active exploitation by threat actors in the wild.

Source:CISA

CiscoAnalysis1 min read

Cisco releases critical security advisories for Expressway RCE and Snort 3 engine

What happened.Cisco published urgent security advisories addressing a maximum-severity remote code execution flaw in Cisco Expressway Series collaboration gateways alongside multiple critical fixes in the Snort 3 engine.

Source:Cisco Security Advisories

AmazonAnalysis1 min read

Amazon Web Services patches SageMaker Python SDK bucket ownership verification flaw

What happened.Amazon Web Services released security bulletin 2026-142-AWS detailing a resolved bucket ownership verification vulnerability in the Amazon SageMaker Python SDK.

Source:AWS Security Bulletins

CISAAnalysis1 min read

CISA and FBI issue joint advisory on SafePay ransomware targeting critical infrastructure

What happened.CISA, the FBI, and allied cyber agencies published joint advisory AA26-293A detailing active intrusion campaigns conducted by the SafePay ransomware group against critical infrastructure organizations.

Source:CISA

GoogleAnalysis1 min read

Compromised eMudhra intermediate CA keys trigger emergency browser and runtime blocks

What happened.Browser vendors and runtime maintainers released urgent security updates to distrust eight intermediate certificate authority keys operated by eMudhra after private keys with near-zero entropy were exposed.

Source:Google Cloud Security Bulletins

MicrosoftAnalysis1 min read

Microsoft introduces Quick Machine Recovery in Windows Server 2025 to remediate boot failure

What happened.Microsoft incorporated remote Quick Machine Recovery into Windows Server 2025 with the release of the October security update to help enterprise administrators resolve catastrophic system startup failures.

Source:Microsoft Security Response Center

CISAAnalysis1 min read

BeyondTrust and CISA disclose critical remote support auth bypass under active attack

What happened.CISA added an improper origin validation flaw in BeyondTrust Remote Support to its Known Exploited Vulnerabilities catalog following active zero-day attacks.

Source:CISA

CiscoAnalysis1 min read

Cisco fixes maximum-severity Secure Email Gateway relative path traversal flaw

What happened.Cisco published an urgent advisory for Secure Email Gateway addressing an unauthenticated remote code execution flaw in its file reputation engine.

Source:Cisco Security Advisories

CISAAnalysis1 min read

CISA mandates emergency remediations for Ivanti Connect Secure zero-day

What happened.CISA issued an urgent directive ordering federal agencies to patch an authentication spoofing zero-day in Ivanti Connect Secure VPN appliances.

Source:CISA

SonicWallAnalysis1 min read

SonicWall fixes maximum-severity SSRF flaw under active attack

What happened.SonicWall released emergency platform hotfixes for its Secure Mobile Access 1000 Series appliances. The update repairs a critical server-side request forgery vulnerability that threat actors are actively exploiting in the wild.

Source:SonicWall PSIRT

CISAAnalysis1 min read

CISA and allied agencies expose commercial hacking network

What happened.CISA, the FBI, and partner cyber defense agencies from six allied nations issued joint advisory AA26-281A. The notice details how state-linked threat actors use commercial tooling firm Integrity Technology Group to breach critical infrastructure.

Source:CISA

CitrixAnalysis1 min read

Citrix and CISA release urgent NetScaler SAML memory safety updates

What happened.Citrix and CISA published urgent security guidance for NetScaler ADC and Gateway appliances. The alert addresses a critical memory overflow flaw in SAML authentication configurations during ongoing edge appliance attacks.

Source:CISA