cybercory.com by Sainttly Group

27/10/2026

at Risk: Can Access Feeds Through Cloud Connectivity

may be able to take control of and recorders through the manufacturer’s /P2P -access feature, even when the devices are not directly exposed to the internet. ’s national cyber incident response team, -UA, has reported cases of unauthorized access involving live video feeds, configuration changes and the creation of rogue user accounts. The warning highlights a security gap that organizations can easily overlook: keeping surveillance devices behind a firewall does not necessarily protect them when cloud-based remote access remains enabled.

https://cybercory.com/2026/10/27/dahua-cameras-at-risk-hackers-can-access-video-feeds-through-cloud-connectivity/

06/10/2026

Exposes the Cost of a Missed Patch as Exploit PeopleSoft Flaw

The is investigating a damaging data breach that exposed sensitive information linked to thousands of employees and applicants, while reports that an contractor was removed after failing to implement a critical security patch on a third-party platform used by the bureau.

The platform was , placing renewed attention on , a critical vulnerability that has already been exploited in attacks around the world. The incident is a sharp reminder that attackers do not always need to break directly into a government network. Sometimes, the weakest link is a trusted platform, a contractor or a single patch that was never applied.

Full article here:

https://cybercory.com/2026/10/06/fbi-breach-exposes-the-cost-of-a-missed-patch-as-shinyhunters-exploit-oracle-peoplesoft-flaw/

05/10/2026

Citrix CVE-2026-88779 Added to KEV as Active Exploitation Raises Urgency

A newly disclosed vulnerability in Citrix NetScaler and has moved rapidly from a vendor security advisory to an active threat for organizations worldwide. Tracked as -2026-88779, the high-severity flaw affects appliances configured for authentication and has now been added to the U.S. Cybersecurity and Infrastructure Security Agency ( ) Known Exploited Vulnerabilities catalog, signaling that attackers are already exploiting the weakness in the wild.

Full Article Here:

https://cybercory.com/2026/10/05/citrix-netscaler-vulnerability-cve-2026-88779-added-to-cisa-kev-as-active-exploitation-raises-urgency/

29/09/2026

Connecting Innovation to Architecture: How Saintynet Cybersecurity by Sainttly Group Navigated to Solve ’s Evolving Landscape

From strategic dialogues with H.E. Dr. to dynamic vendor engagements across , , and exposure management, bridges global vendor capabilities with regional enterprise needs.

At , the energy on the exhibition floor reflected a clear shift in how regional organizations view digital defense. Reactive security is no longer an option. As enterprises across the and accelerate their digital transformation initiatives, security teams face an increasingly sophisticated threat environment one that demands tighter integration, stronger automation, and clearer visibility across complex environments.

Read the full article here:

https://cybercory.com/2026/09/29/connecting-innovation-to-architecture-how-saintynet-cybersecurity-navigated-gisec-2026-to-solve-meas-evolving-threat-landscape/

21/09/2026

HEIF Heist: How a Malicious Image Could Become a Gateway to Enterprise Systems

A malicious image file may look harmless. Behind the scenes, however, the software responsible for processing that image can provide attackers with a much more valuable target.

A seemingly harmless image upload could give attackers a way into far more than a single application. New research from Hacktron has uncovered an attack path dubbed “HEIF Heist,” showing how malicious HEIF, HEIC and AVIF files could exploit weaknesses in widely used image-decoding software and potentially expose sensitive data or enable remote code ex*****on. The research is particularly notable for another reason: the researchers used frontier AI systems to accelerate vulnerability discovery and exploit development. Their findings, including an attack path involving OpenAI systems, offer a timely warning for security teams: the software quietly processing user-uploaded files can be just as important to protect as the applications users can see.

A seemingly harmless image upload could give attackers a way into far more than a single application. New research from Hacktron has uncovered an attack path dubbed “HEIF Heist,” showing how malicious HEIF, HEIC and AVIF files could exploit weaknesses in widely used image-decoding software and p...

15/09/2026

15/09/2026

Exploited in the Wild: Critical SQL Flaw Gives Attackers Root Access

A critical vulnerability in Cisco Secure Email Gateway is being actively exploited, giving unauthenticated remote attackers a potential path from a specially crafted email to root-level command ex*****on on the underlying system. Tracked as CVE-2026-76461 and rated 9.8 on the scale, the flaw puts organizations running affected versions under immediate pressure to patch and investigate.

https://cybercory.com/2026/09/15/cisco-secure-email-gateway-zero-day-exploited-in-the-wild-critical-sql-flaw-gives-attackers-root-access/

07/09/2026

MikroTik RouterOS Vulnerabilities Are Now Being Exploited – Update Your Routers Immediately

MikroTik urges users to upgrade RouterOS as security researchers confirm active exploitation of vulnerabilities that can expose internet-facing routers to full compromise.

MikroTik’s latest RouterOS security update has taken on a new urgency. What initially appeared to be an important but largely precautionary update has now been linked to active attacks against internet-accessible devices, according to CERT Polska. The vulnerabilities, tracked collectively as “MikroTrick,” can allow attackers to bypass SSH authentication and escalate privileges to full administrative control on vulnerable routers.

https://cybercory.com/2026/09/07/mikrotik-routeros-vulnerabilities-are-now-being-exploited-update-your-routers-immediately/

01/09/2026

AWS Root Accounts Targeted in Password-Spraying Campaign Across More Than 150 Organizations

A newly uncovered campaign has put one of the most powerful identities in the cloud directly in attackers’ sights.

Attackers are increasingly targeting the most powerful identities in cloud environments. A newly uncovered campaign targeting AWS root accounts is a timely reminder that privileged access remains one of cybersecurity’s most valuable – and vulnerable – targets.

Attackers are increasingly targeting the most powerful identities in cloud environments. A newly uncovered campaign targeting AWS root accounts is a timely reminder that privileged access remains one of cybersecurity’s most valuable - and vulnerable - targets. Security researchers at Datadog Secur...

25/08/2026

When Trust Becomes the Payload: Cato Networks CTRL Unmasks Fake Codex ClickFix Campaign Targeting macOS Users

As transitions from standalone productivity assistants to deeply embedded enterprise workflows, actors have adapted their strategies to exploit this new attack surface. Based on intelligence gathered across 6.7 trillion global network flows, this report exposes how shadow , prompt injection, and weaponized extensions are challenging standard defense models and forcing organizations to reimagine .

https://cybercory.com/2026/08/25/when-trust-becomes-the-payload-cato-ctrl-unmasks-fake-codex-clickfix-campaign-targeting-macos-users/