Cisco has patched CVE-2026-76519, a zero-day in Secure Email Gateway (SEG) that attackers are exploiting to gain root-level command execution. The flaw can be triggered remotely without authentication by sending a specially crafted email attachment through a vulnerable appliance.
Cisco patches exploited Secure Email Gateway zero-day More...
Ultra Ethernet Consortium’s 1.1 specification adds support for connecting accelerators inside a server, along with congestion controls that can be updated in software. It also lets switches perform collective operations for AI and high-performance computing workloads, potentially halving the bandwidth required for large reductions.
Ultra Ethernet 1.1 targets AI scale-up networks with programmable congestion control More...
Cisco and Nvidia are developing an ultra-dense optical module that could carry up to 12.8 Tbps over a single pluggable connection inside an AI datacenter, linking GPUs, network interface cards, and switches. The open USFP design could simplify cabling, but its 100-watt power target and larger failure impact pose tradeoffs.
Cisco and Nvidia’s USFP targets 12.8 Tbps for AI datacenter links More...
Microsoft’s October 13, 2026, updates fix the Always On VPN failures that September’s Windows updates introduced. KB5127648 covers Windows 11 versions 24H2, 25H2, and 26H2; KB5127646 addresses version 26H1.
Microsoft fixes Windows 11 Always On VPN failures in October updates More...
Windows 11 update KB5127648 is preventing some PCs from completing WPA2-Enterprise Wi-Fi authentication over 802.1X and PEAP, across systems with different wireless chipsets. A Registry change may restore access without uninstalling the update, but it re-enables legacy authentication behavior that Microsoft is phasing out.
Windows 11 KB5127648 breaks enterprise Wi-Fi; a Registry fix keeps it installed More...
CISA is urging organizations to patch Ivanti Connect Secure after attackers used CVE-2026-104935 to break in without credentials and run commands. The fix addresses two flaws in an attack chain, but a third vulnerability that can escalate privileges to root remains unpatched, Volexity reports.
Ivanti patches zero-day, but a third flaw in attack chain remains open More...
Citrix has patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial of service in SAML deployments. Rated 9.5, the memory-overflow vulnerability has no known in-the-wild exploitation, but administrators should check affected instances and upgrade.
Citrix patches critical NetScaler SAML flaw with 9.5 severity score More...
Five critical flaws in Cisco NX-OS could let unauthenticated attackers take over Nexus 3000 and 9000 switches or force them to reload. The vulnerabilities affect standalone switches when specific management and operations features are enabled; Cisco says it has no evidence of exploitation and recommends applying fixed software.
Critical Cisco NX-OS flaws put Nexus switches at risk of root takeover More...
Attackers who compromised the operators of the.gh,.sl, and.as domain registries obtained 12 valid HTTPS certificates for Google-related domains and other organizations. Certificate Transparency logs show the certificates appeared between September 22 and 27; 11 were issued by Let’s Encrypt and one by ZeroSSL. Google says its systems were not breached and has blocked the certificates in Chrome.
Hackers fraudulently obtain HTTPS certificates for Google More...
Interested in transformative technologies such as AI, robotics, quantum computing, and crypto?
Read hplus.club.
