network security

7 articles · newest first

A Ubiquiti UniFi Dream Machine network appliance, the kind of device affected by the newly patched UniFi OS vulnerability

Ubiquiti just shipped three perfect-10 security bugs in one bulletin — and one needs zero password

UniFi Protect, UniFi OS and UniFi Talk each got their own maximum-severity flaw this week — the fourth time this year a Ubiquiti bug has hit a perfect 10.

Ravi Malhotra · Aug 27 · 7 min

Rows of networking equipment and server racks in a data center, the kind of infrastructure Cisco's Crosswork and Secure Workload platforms manage

Hardware

Cisco just found five perfect-10 bugs in its own network tools — before anyone else did

Nine vulnerabilities, five of them maximum severity, were sitting in the software that runs and secures corporate networks — Cisco caught them first, but that clock is already running.

Ravi Malhotra · Aug 24 · 6 min

Rows of network server racks in a data center

Hardware

your Citrix login page can be hacked without anyone entering a password — patch it today

CVE-2026-8452 lets an attacker with zero credentials overflow a buffer inside NetScaler and run their own code — and Citrix's advisory was so thin that even the researchers had to guess the CVE number.

Ravi Malhotra · Aug 15 · 6 min

Hardware

cisco just patched three near-perfect 9.9 bugs in the box that runs your whole network

Three flaws in Catalyst SD-WAN and IOS XE score 9.9 out of 10 — and one of them lets an attacker reach files no matter how the device is configured.

Ravi Malhotra · Aug 8 · 6 min

A rack-mounted network security appliance similar to SonicWall's SMA 1000 series sitting at the edge of a company network

Hardware

a ransomware crew had root on SonicWall's boxes for weeks before anyone noticed

CVE-2026-15409 and CVE-2026-15410 let INC ransomware walk into SMA 1000 appliances as root — SonicWall didn't even know the holes existed until the attacks were already underway.

Ravi Malhotra · Aug 6 · 6 min

Networking and firewall equipment mounted in a server rack

Software

Cisco's firewall management tool shipped with a hidden login — and attackers found it first

CVE-2026-20316 is a static-credential bug in Secure FMC that's already on CISA's Known Exploited Vulnerabilities list, with a federal patch deadline of August 1.

Priya Nair · Aug 5 · 6 min

Rows of networking server racks with status lights in a data center

Hardware

Arista's SD-WAN box has a bug so bad hackers don't even need a password

CVE-2026-16812 scores a perfect 10, needs zero credentials, and CISA is already watching it get used against real networks.

Ravi Malhotra · Aug 3 · 7 min