News that matters, without the noise.

Oracle Security Alert for CVE-2026-21992 – 19 March 2026

Oracle Critical Patch Update Advisory – January 2026

Synology-SA-26:05 Synology SSL VPN Client

Synology has released a security update for the Synology SSL VPN Client utility to address vulnerabilities: CVE-2021-47960 allows

ZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Flowise. Authentication is not required to

ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first

ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Siemens SINEC NMS. Authentication is not

[Wireshark-announce] Wireshark 4.4.14 is now available

AirSnitch Overview

What is AirSnitch? In February 2026, security researchers at the Network and Distributed System Security (NDSS) Symposium presented

End of support for cipher suites using the CBC mode

On July 19th, 2023, at 9am PST, Juniper Mist will end support of cipher suites using the Cipher

RADIUS Protocol Vulnerability (Blast-RADIUS)

CVE-2024-3596 On July 9, 2024 researches announced a protocol level vulnerability in the RADIUS protocol with the ability

SVD-2026-0408: Third-Party Package Updates in Splunk Operator for Kubernetes Add-on – April 2026

Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk Operator for Kubernetes Add-on version

SVD-2026-0407: Sensitive Information Disclosure in `_internal` index in Splunk MCP Server app

In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to