Explore

Rapid Read Rapid Read
Arista Networks Patches Critical VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

Arista Networks Patches Critical VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

Arista Networks has released patches for a critical OS injection vulnerability in its VeloCloud Orchestrator (VCO) platform, identified as CVE-2026-16812. This vulnerability, which has a maximum CVSS score of 10, allows remote exploitation to access privileged functionalities intended for internal use. The flaw affects only the VeloCloud Orchestrator On-Prem and has been actively exploited in the wild as a zero-day. Arista has addressed the issue in VCO versions 5.2.3.14, 6.1.3.4, 6.4.2.4, and 7.0.0.1. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog, urging federal agencies to patch it within three days.
Rapid Read Rapid Read
Arista VeloCloud Orchestrator Vulnerability Exploited, Prompting Urgent Security Measures

Arista VeloCloud Orchestrator Vulnerability Exploited, Prompting Urgent Security Measures

A critical security flaw in the Arista VeloCloud Orchestrator (VCO) has been actively exploited, leading to significant cybersecurity concerns. The vulnerability, identified as CVE-2026-16812, is a command injection flaw that allows for arbitrary code execution, potentially compromising the confidentiality, integrity, and availability of the orchestrator and its managed data. Arista has acknowledged the issue, which affects several versions of VCO, and has released patches to address the vulnerability. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this flaw to its Known Exploited Vulnerabilities catalog, mandating federal agencies to apply the patch by July 30, 2026. The exploitation of this vulnerability highlights the ongoing challenges in securing network infrastructure against sophisticated cyber threats.
Trendline Trendline
Arista Networks Patches Critical VeloCloud Orchestrator Vulnerability

Arista Networks Patches Critical VeloCloud Orchestrator Vulnerability

Arista Networks Patches Critical VeloCloud Orchestrator Vulnerability
Rapid Read Rapid Read
Arista Networks Addresses Critical VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

Arista Networks Addresses Critical VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

Arista Networks has released patches for a critical OS injection vulnerability in its VeloCloud Orchestrator (VCO) platform, which has been exploited as a zero-day. The vulnerability, identified as CVE-2026-16812, carries a maximum CVSS score of 10 and allows remote exploitation to access privileged functionalities intended for internal use. The flaw affects only the VeloCloud Orchestrator On-Prem and has been addressed in several updated versions. Arista Networks warns that the vulnerability is actively exploited and does not require special configuration or authentication for successful exploitation. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog, urging federal agencies to patch it within three days.
Rapid Read Rapid Read
Critical Fastjson Vulnerability Exploited, Threatens Multiple U.S. Sectors

Critical Fastjson Vulnerability Exploited, Threatens Multiple U.S. Sectors

Security researchers have identified a critical remote code execution (RCE) vulnerability in Fastjson, a widely used JSON processing library for Java developed by Alibaba. The vulnerability, tracked as CVE-2026-16723, has a CVSS score of 9 and affects all deployments running as a Spring Boot executable fat-jar, which is the most common deployment model. This flaw allows attackers to execute arbitrary code on target servers that have not enabled SafeMode, posing a significant threat to the confidentiality, integrity, and availability of affected systems. The vulnerability impacts Fastjson versions 1.2.68 up to and including 1.2.83, which are no longer supported. Fastjson versions 2.x are not affected. The flaw can be exploited through crafted JSON files containing a malicious @type value, which manipulates the library into performing unauthorized resource lookups. This vulnerability has been exploited in attacks against various sectors in the U.S., including business, computing, financial services, healthca...
Rapid Read Rapid Read
PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

PTC Windchill Vulnerability Exploited in Ransomware Campaign Affecting Multiple Industries

A critical remote code execution vulnerability in PTC's Windchill and FlexPLM platforms has been exploited by a Cl0p ransomware affiliate. The vulnerability, tracked as CVE-2026-12569, allows attackers to execute code without authentication due to a deserialization of untrusted data issue. Despite being patched on June 17, the vulnerability was exploited in the wild shortly after, with indicators of compromise published by PTC. The exploitation has targeted organizations in sectors such as aerospace, automotive, manufacturing, and retail/apparel. Attackers have been sending extortion emails to hundreds of users within impacted organizations, threatening data leaks. Organizations are advised to apply patches and conduct threat hunting using published indicators of compromise.
USA Today USA Today
'Coordinated cyberattack' targets over 30 water systems in Minnesota

'Coordinated cyberattack' targets over 30 water systems in Minnesota

Minnesota officials are investigating a cyberattack that targeted more than 30 community water systems on July 26 and 27.
Rapid Read Rapid Read
Sen. Wyden Calls for Federal Agencies to Abandon Insecure VPNs in Favor of Zero-Trust Architecture

Sen. Wyden Calls for Federal Agencies to Abandon Insecure VPNs in Favor of Zero-Trust Architecture

Senator Ron Wyden has urged federal agencies to eliminate the use of outdated and insecure virtual private networks (VPNs) that are accessible via the public internet. In a letter addressed to the Office of Management and Budget, the Cybersecurity and Infrastructure Security Agency, and the National Institute of Standards and Technology, Wyden emphasized the need for a shift towards modern, secure remote-access technologies. He highlighted the vulnerabilities associated with legacy VPNs, which have been exploited in several cyberattacks on federal agencies. Wyden advocates for the adoption of zero-trust architecture, which operates on a 'never-trust, always-verify' principle, to enhance cybersecurity across federal networks.
Trendline Trendline
Coca-Cola's Fairlife Resumes Operations After Ransomware Attack

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack

Coca-Cola's Fairlife Resumes Operations After Ransomware Attack
Rapid Read Rapid Read
Cyberattack Disrupts Water Utilities in Over 30 Minnesota Communities, Prompting Security Response

Cyberattack Disrupts Water Utilities in Over 30 Minnesota Communities, Prompting Security Response

A cyberattack disrupted water and wastewater utilities in more than 30 Minnesota communities, including Plymouth and Braham, over a two-day period. The attack targeted equipment connected via cellular communications, but water quality remained unaffected. Minnesota Information Technology Services is leading the response, working with state and federal agencies to contain and investigate the attack. The incident is part of a broader pattern of cyber threats against U.S. water facilities, with no specific party yet attributed to the Minnesota attacks. The response includes sharing threat intelligence and providing guidance to affected utilities.
Rapid Read Rapid Read
Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

Cl0p Ransomware Group Exploits PTC Windchill Vulnerability for Data Extortion

The Cl0p ransomware group is targeting vulnerabilities in PTC Windchill and FlexPLM systems, exploiting a critical security flaw (CVE-2026-12569) to execute remote code and deploy web shells. This campaign affects sectors such as manufacturing, automotive, aerospace, and retail. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has listed this flaw in its Known Exploited Vulnerabilities catalog. The attackers use a combination of information disclosure and server-side flaws to gain unauthorized access, leading to data theft and extortion. The Cl0p group has a history of exploiting enterprise software vulnerabilities for similar attacks.
Trendline Trendline
Leading Cybersecurity Firms Highlight AI Solutions to Combat Evolving Threats

Leading Cybersecurity Firms Highlight AI Solutions to Combat Evolving Threats

Leading Cybersecurity Firms Highlight AI Solutions to Combat Evolving Threats