Our insights

Security insights that Cut Through the Noise. 

Timely breakdowns of breaches, vulnerabilities, and policy shifts, alongside practical write-ups on risk and compliance - the same plain-language approach we bring to every client engagement.

Illustration representing LetsDefend Infosec's insights and write-ups
All posts Cybercrime Data Breaches Data Privacy Law Enforcement Operations Malware Nation-State Threats Phishing Policy & Compliance Threat Actors Threat Intelligence Vulnerabilities
Vulnerabilities
28 Sep 2026 5 min read

Citrix NetScaler ADC & Gateway Critical RCE Vulnerabilities Actively Exploited

Citrix disclosed two critical remote code execution flaws in NetScaler ADC and NetScaler Gateway that are being exploited in the wild. Patches have been released, but one vulnerability affects every deployment, including default configurations.

#Vulnerabilities #Remote Code Execution #Citrix
LetsDefend Infosec Read more
Vulnerabilities
28 Sep 2026 4 min read

CISA Flags Actively Exploited SharePoint Flaw (CVE‑2026‑65660) with Federal Patch Deadline

CISA has added CVE‑2026‑65660 for Microsoft SharePoint to its Known Exploited Vulnerabilities catalog, confirming active exploitation and imposing a September 28 patch deadline for federal agencies. Immediate remediation is required.

#Vulnerabilities #Microsoft SharePoint #CISA
LetsDefend Infosec Read more
Vulnerabilities
28 Sep 2026 4 min read

Citrix NetScaler Zero‑Day Exploits (CVE‑2026‑88771/88772) Actively Attacked

Citrix disclosed two critical NetScaler remote code execution flaws, CVE‑2026‑88771 and CVE‑2026‑88772, that are currently being exploited. Security updates are available, and administrators are urged to shut down vulnerable appliances immediately.

#Vulnerabilities #Citrix #NetScaler
LetsDefend Infosec Read more
Vulnerabilities
17 Sep 2026 4 min read

Active Exploitation of Cisco ISE Zero-Day Prompts Emergency Patch

Remote, unauthenticated attackers are actively exploiting a zero‑day authentication bypass in Cisco ISE. Cisco responded with an emergency patch. This brief outlines the incident, technical details, impact, and immediate mitigation steps.

#Cisco #Zero-Day #Authentication Bypass
LetsDefend Infosec Read more
Vulnerabilities
10 Sep 2026 4 min read

Mythos Vulnerability Firehose Reveals Critical Disclosure Lag

Project Glasswing’s analysis shows that only a small fraction of the Mythos vulnerabilities have been disclosed and an even smaller portion remediated, exposing a human bottleneck in the security pipeline.

#Vulnerabilities #Disclosure #Remediation
LetsDefend Infosec Read more
Vulnerabilities
10 Sep 2026 4 min read

Cisco Secure FMC Authentication Bypass (CVE‑2026‑20079) Actively Exploited

Cisco has confirmed that CVE‑2026‑20079, a maximum‑severity authentication bypass in its Secure Firewall Management Center (FMC) software, is currently being leveraged in active attacks. The brief examines the technical nature of the flaw, the scope of impact, and immediate steps organizations should take.

#Cisco #Vulnerabilities #Authentication Bypass
LetsDefend Infosec Read more
Vulnerabilities
7 Sep 2026 3 min read

N-able Issues Emergency Hotfix for Actively Exploited RCE Flaw in N-central RMM

N-able released an emergency hotfix for a maximum‑severity remote code execution vulnerability in its N-central remote monitoring and management platform. The flaw is currently being actively exploited, prompting urgent patch deployment.

#Vulnerabilities #Remote Code Execution #RMM
LetsDefend Infosec Read more
Vulnerabilities
7 Sep 2026 5 min read

MikroTik Routers Hijacked via Unauthenticated SSH Access

Attackers are exploiting internet‑exposed SSH on MikroTik routers to obtain full administrative control without credentials. CERT Polska warned on September 5, and the activity has been observed since at least September 2.

#MikroTik #SSH #Exploitation
LetsDefend Infosec Read more
Vulnerabilities
2 Sep 2026 4 min read

Unauthenticated RCE Chain in GeoNetwork Patched in Latest Releases

Two linked flaws in the open‑source GeoNetwork platform allowed unauthenticated remote code execution. Patches arrived in versions 4.4.12 and 4.2.17 on July 8 2026, mitigating the risk for government and agency geoportals.

#Vulnerabilities #Open Source #Geospatial
LetsDefend Infosec Read more