Critical authentication bypass vulnerability in Xen Orchestra under active exploitation
10-11-2026 23:54 via SCM feed for Latest

Critical authentication bypass vulnerability in Xen Orchestra under active exploitation

A critical authentication bypass vulnerability in Xen Orchestra is currently being exploited in the wild, potentially granting unauthorized actors administrator privileges and full control over XCP-ng virtualization hosts, based on information published by Bleeping Computer.
Read more »

Security news



Managed service providers face client trust challenges during ransomware recovery
Managed service providers face client trust challenges during ransomware recovery
Amplifon Americas discloses data breach affecting sensitive customer information
Amplifon Americas discloses data breach affecting sensitive customer information
Flashpoint launches agentic AI to automate cybersecurity threat investigations
Flashpoint launches agentic AI to automate cybersecurity threat investigations
Cowbell Cyber introduces AI liability insurance for small and midsized businesses
Cowbell Cyber introduces AI liability insurance for small and midsized businesses
Blind Eagle threat group launches new phishing campaign in Latin America
Blind Eagle threat group launches new phishing campaign in Latin America
Teleport releases beams to secure artificial intelligence agents in production
Teleport releases beams to secure artificial intelligence agents in production
The refrigeration attacks in Europe are a prelude to attacks on US critical infrastructure
The refrigeration attacks in Europe are a prelude to attacks on US critical infrastructure
Cybersecurity and Infrastructure Security Agency updates incident reporting portal
Cybersecurity and Infrastructure Security Agency updates incident reporting portal
Remus stealer adds persistent Gmail access feature
Remus stealer adds persistent Gmail access feature
Qubole customers targeted in AWS cross-account access attack
Qubole customers targeted in AWS cross-account access attack
Brazil government technology provider Serpro faces record distributed denial-of-service attacks
Brazil government technology provider Serpro faces record distributed denial-of-service attacks
SonicWall MFA bypass flaw added to CISA exploited vulnerabilities list
SonicWall MFA bypass flaw added to CISA exploited vulnerabilities list
Racing against the clock: How to stand up to emerging agentic AI threats
Racing against the clock: How to stand up to emerging agentic AI threats
Offensive AI will expose why the AI SOC is not enough for incident response
Offensive AI will expose why the AI SOC is not enough for incident response
Desktop versie