InfoSecBulletin Cybersecurity for mankind
Splunk has put out security updates for many flaws in Splunk Enterprise, Splunk Cloud Platform, and the Splunk AI Toolkit. These issues could cause denial-of-service (DoS) attacks and expose sensitive information.
The flaws revealed on May 20, 2026, have three known weaknesses: CVE-2026-20238, CVE-2026-20239, and CVE-2026-20240.
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
Organizations should quickly apply patches or turn off the Splunk Archiver app if it is not needed. But, turning off the app could disrupt automated data archiving tasks.
Splunk strongly urges users to:
Upgrade all affected components to the latest secure versions.
Restrict access to sensitive indexes such as _internal.
Review role-based access controls and inherited permissions.
Disable vulnerable apps if patches cannot be applied immediately.
These flaws show the dangers of wrong access settings, not enough checks on inputs, and unsafe logging habits. Patching on time and managing settings well are very important to keep Splunk safe from attacks.
Cisco
Cisco has released security updates to fix a serious Secure Workload problem that lets attackers take over Site Admin roles.
Cisco Secure Workload, once called Cisco Tetration, helps managers make their networks safer. It does this by using zero trust microsegmentation to lower risks and prevent movement across the network to protect business applications.
The security issue called CVE-2026-20223 was discovered in Secure Workload’s REST APIs. It allows attackers without an account to use the Site Admin’s privileges to access resources.
“This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint,” Cisco explained in a Wednesday advisory.
“A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user.”
Cisco says there are no solutions for this security problem, has released updates to fix it for on-premises customers, and has already taken care of it in the cloud-based Cisco Secure Workload SaaS service.
Over 100 Cisco Secure Email Devices Exposed to Zero‑Day Attack
