ALERT
Palo Alto, Sonicwall, Ivanti and GitLab patches multiple flaws

Palo Alto fixes multiple flaws, including CVE-2026-0232 which impacts the Cortex XDR Agent on Windows computers. There is an issue with a safety feature that lets a local Windows admin turn off the agent completely.

Another vulnerability, tracked as CVE-2026-0233, allows a local Windows user to “execute arbitrary code with NT AUTHORITY\SYSTEM privileges”.

• Data Breach

Brazilian health surveillance platform breach exposes 100K+ sensitive documents

By infosecbulletin / Wednesday , August 5 2026

Cybersecurity Researcher Jeremiah Fowler uncovered and reported to Express VPN a publicly exposed database that was neither password-protected nor encrypted....

Read More

• International

Thousands of data centers are at risk of compromise due to a 22-year-old flaw

By infosecbulletin / Tuesday , August 4 2026

Thousands of data centers are in danger because of a 22-year-old problem in Baseboard Management Controller (BMC) processors, says the...

Read More

• National

Bangladesh Launches (CIRS) and National ICT & Cyber Security Rating System (NRS)

By infosecbulletin / Tuesday , August 4 2026

In an important move to boost the country's cybersecurity, Bangladesh started the Cyber Incident Reporting System (CIRS) and the National...

Read More

• Alert

CVE-2026-18574
Check Point Authentication Bypass Hits Management Server

By infosecbulletin / Tuesday , August 4 2026

Check Point fixed a flaw that allowed bypassing authentication on its Security Management and Multi-Domain Security Management servers. This issue...

Read More

• Alert

TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise

By infosecbulletin / Tuesday , August 4 2026

TP-Link has shared a security warning about a serious problem with its TL-WR940N V6 wireless router. This problem, known as...

Read More

• Cyber Attack
• Data Breach

ExfilSquad releases info of over 100,000 UK police officers, staff

By infosecbulletin / Monday , August 3 2026

A cyberattack on the U.K.'s Police National Legal Database (PNLD) has put the contact information of over 100,000 police officers...

Read More

• Alert

CISA alerts to cyberattacks affecting U.S. water utilities

By infosecbulletin / Saturday , August 1 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of a big rise in attacks on internet-connected programmable logic controllers...

Read More

• Hot Topic

“CyberStrike” AI-Driven Security Platform for Automated Testing

By infosecbulletin / Friday , July 31 2026

A new open-source project named CyberStrike aims to be the first AI tool made for offensive security. It can turn...

Read More

• National

AIDCQ Propose to invest $2 billion in AI data center in Bangladesh

By infosecbulletin / Friday , July 31 2026

Many countries are now showing interest to invest in the data center industry in Banglades especially in AI data centers....

Read More

• Alert

NVIDIA BlueField Flaw Enables Code Execution Attacks

By infosecbulletin / Thursday , July 30 2026

NVIDIA has revealed a big flaw with its BlueField DPUs and ConnectX networking systems. This issue could let attackers run...

Read More

Thirdly, the flaw known as CVE-2026-0234 (CVSS 7.2), is worrying because it lets anyone without a login get into and change protected information. By avoiding signature checks, a hacker could insert themselves into secure chats or alter platform data.

Companies are encouraged to quickly install these updates to keep their defenses strong.

Ivanti

The Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent alert about a critical flaw (CVE-2026-1340) in Ivanti Endpoint Manager Mobile that is actively being exploited.

They added it to their Known Exploited Vulnerabilities catalog on April 8, 2026, and ordered U.S. federal agencies to fix it within 3 days (by April 11).

CISA urges all organizations to act just as quickly: apply patches immediately, follow Ivanti’s guidance, and if mitigation isn’t possible, disconnect the affected system until it’s secured.

GitLab

GitLab released urgent updates (18.10.3, 18.9.5, 18.8.9) to fix multiple vulnerabilities. High-severity issues include:
CVE-2026-5173: Authenticated command execution via WebSockets
CVE-2026-1092: Unauthenticated DoS via Terraform API
CVE-2025-12664: Unauthenticated DoS via GraphQL

Medium-severity flaws include:

CVE-2026-1516: Code injection leaking user IPs
CVE-2026-1403: CSV import crash (Sidekiq)
CVE-2026-4332: Malicious JavaScript in dashboards
CVE-2026-1101: DoS via GraphQL input validation

All administrators are strongly advised to upgrade immediately to prevent exploitation.

SonicWall

SonicWall warned of serious problems with its SMA 1000 devices. They found four issues that could let someone gain higher access, bypass multi-factor authentication, and find out user details.

Key CVEs:

CVE-2026-4112: SQL injection leading to admin-level access
CVE-2026-4113: User credential enumeration without authentication
CVE-2026-4114: TOTP MFA bypass for administrators
CVE-2026-4116: TOTP MFA bypass for users

Users are urged to apply the latest hotfixes immediately to mitigate risks.