Barracuda Networks has released patches for two vulnerabilities, CVE-2026-116606 and CVE-2026-111560, affecting its Email Security Gateway and several other products including its Load Balancer ADC, Message Archiver, WAF Control Center, Web Application Firewall, and Web Security Gateway. Chained together, the flaws could let an attacker with access to a device's administrative interface bypass authorization controls and gain root access.
bleepingcomputer.com
· 2026-11-03
Optiv has introduced CyberBOT, a free cybersecurity education program aimed at classrooms, nonprofits and community organizations. The program consists of five interactive sessions covering threat actors, email security, password practices, social media privacy and mobile device protection, built around hands-on activities like games, posters and group exercises.
darkreading.com
· 2026-10-21
Aikido Security published research showing that GitLab's per-user incoming email address, meant to let users create project issues via email, contains a non-expiring token that functions as an authentication and authorization credential. Because GitLab treats any message sent to that address as coming from its owner, exposure of the address alone can let an attacker create issues, submit merge requests, or send patch files across an organization's public and private projects without needing account credentials.
darkreading.com
· 2026-09-23
Security researchers are flagging a fresh wave of email scams that no longer follow the old telltale patterns like poor grammar or suspicious links. These updated schemes are polished, convincing, and designed to slip past users who rely on outdated advice from corporate IT departments.
fastcompany.com
· 2026-08-31
GoKawiil