⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Over the past years, organized malware disruptions have grown in speed and prominence as more and more businesses and law enforcement entities fought together. As HeimdalTM Security has always advocated for building strong connections and working together as a community, throughout the years we’ve been involved in global anti-cyberthreat operations such as the No More […] The post Operation Tovar: What It Was and How A Key Botnet Was Eliminated appeared first on Heimdal Security Blog.
Over the past years, organized malware disruptions have grown in speed and prominence as more and more businesses and law enforcement entities fought together. As HeimdalTM Security has always advocated for building strong connections and working together as a community, throughout the years we’ve been involved in global anti-cyberthreat operations such as the No More […] The post Operation Tovar: What It Was and How A Key Botnet Was Eliminated appeared first on Heimdal Security Blog.
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to modify .fsa/.hid output files, tampering with DNA data and resulting in inaccurate test results. The following versions of Thermo Fisher Applied Biosystems Genetic Analyzers are affected: Applied Biosystems 3500/3500xL Series Data Collection Software <=4.0.2 Applied Biosystems 3730/3730xL Series Data Collection Software <=5.0.2 Applied Biosystems SeqStudio Genetic Analyzer Data Collection Software <=1.2.5 Applied Biosystems SeqStudio Flex Series Instrument Software <=1.2.0 Applied Biosystems GeneMapper ID-X Software <=v1.7.3 Applied Biosystems 3130 Series Data Collection Software <=4.1 ABI PRISM 3100/3100-Avant Data Collection Software <=2.0 ABI PRISM 310 Data Collection Software <=3.1 CVSS Vendor Equipment Vulnerabilities v3 8.4 Thermo Fisher Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check Background Critical Infrastructure Sectors: Healthcare and Public Health Countries/Areas Deployed: Worldwide Company Headquarters Location: United States Vulnerabilities Expand All + CVE-2026-17583 The affected product is vulnerable because its .fsa/.hid output files can be edited.
This The Hacker News article details how attackers exploited an authentication bypass in N-able N-central to gain administrative access and reach managed customer systems. The initial fix was incomplete, and attackers used Cloudflare tunnels to maintain persistence.
N-able disclosed that attackers exploited an authentication bypass vulnerability (CVE-2026-18577) in its N-central remote monitoring and management platform, allowing them to gain administrative access to servers running builds prior to 2026.3.1.7. The attackers then used N-central's Take Control feature to access customer-managed endpoints and established persistent Cloudflare tunnels, enabling ongoing access even after the initial compromise was mitigated.
Microsoft's August 2026 Patch Tuesday addresses 421 vulnerabilities, including 62 critical flaws and one actively exploited zero-day (CVE-2026-68820). Notable high-risk vulnerabilities include a critical RCE in Windows Deployment Services TFTP Server (CVSS 9.8) and critical RCEs in SharePoint Server and Windows DHCP Server.