Cisco Catalyst SD-WAN controllers manage connections between an organization’s sites. Talos says attackers used a critical authentication flaw to plant KeyDrift, malware that can collect encryption key material from controller traffic. Separately, Lumen reports Volt Typhoon exploited the same flaw from late 2025, but has not linked that activity to KeyDrift.

Source

Cisco has released fixes for CVE-2026-76418, a zero-day attackers are exploiting to remotely crash Cisco Secure Firewall ASA and FTD devices. The flaw affects reachable SSL VPN services when secondary authentication is configured on a tunnel group; attackers don’t need to log in. Shadowserver is tracking more than 51,000 Cisco ASA SSL VPN devices exposed online, though that count does not show how many remain vulnerable.

Source

Cisco has open-sourced Project Quarry, a detection engine that looks for risky behavior across an AI agent’s full session rather than judging tool calls in isolation. The release includes a command-line scanner, a Python SDK, and plugins for Claude Code, Codex, and other MCP-compatible agents. Cisco says Quarry is already used in AI Defense and plans to bring it to DefenseClaw.

Source

PHP2Shell’s reach extends beyond websites: embedded PHP can leave firewall, VPN, and other appliance management interfaces exposed to remote code execution. CISA has confirmed active exploitation of the flaws, and added them to its Known Exploited Vulnerabilities catalog. Appliance customers often cannot patch PHP themselves; they must wait for vendors to issue updated firmware.

Source

A fix for critical EDK II vulnerability CVE-2026-97631 has been merged into the project’s code, but no stable release includes it yet. The flaw can let an attacker run code in firmware while a server boots over the network, before Secure Boot checks startup components. Until hardware vendors ship firmware updates, organizations that do not need PXE boot can disable it to reduce exposure.

Source

Tailscale creates a secure private network connecting devices, and Tailscale SSH lets approved devices connect across it without passwords or keys. A researcher’s Tailworm report described how a foothold on an approved device could lead to root access on reachable servers; Tailscale has now released version 1.104.4 to fix flaws that could let a permitted session reach root-only services. The Tailscale SSH server runs on Linux and the open-source macOS build.

Source

Tailscale SSH lets approved devices connect across a Tailscale network without relying on conventional SSH passwords or keys. A new report says that, with port forwarding enabled, an attacker who already controls an approved device could exploit the feature to gain root access on reachable servers. The findings come from lab tests, and Tailscale has not confirmed the specific claims.

Source

VeloCloud Orchestrator (VCO) is a web-based portal for managing software-defined wide-area networks (SD-WAN) and their edge devices. Arista says attackers are exploiting a critical flaw in on-premises VCO that lets any authenticated user gain elevated operator privileges. Customers should upgrade to a fixed release and check for signs of compromise.

Source

PAN-OS is the operating system that runs Palo Alto Networks’ next-generation firewalls. Ransomware groups exploiting CVE-2026-0257 in Palo Alto Networks’ PAN-OS are reaching beyond VPN access: Unit 42 has seen attackers pivot to vCenter and ESXi to steal domain credentials while evading endpoint detection. Qilin, Inc, Settra, and other groups have used the authentication bypass to establish unauthorized VPN sessions, bypassing MFA and gaining a foothold in networks.

Source

SONiC (Software for Open Networking in the Cloud) is an open-source, Linux-based network operating system that runs on networking hardware from multiple vendors. Microsoft and Nokia are working to speed up route programming in SONiC, a potential bottleneck in large AI and cloud networks. At the OCP Global Summit, Cisco also expanded its validated SONiC support across more of its Nexus switching portfolio.

Source

Microsoft has reversed its claim that the October 13 update fixed Always On VPN failures, saying the issue remains mitigated rather than resolved. The bug appeared after September updates, and Microsoft had said the October patch fixed it in its October update. A permanent fix is now planned for an update in the coming weeks.

Source

Should you buy the GL.iNet Mango 2 or the UniFi Travel Router? In our hands-on comparison, the short version is that the UniFi Travel Router is the slicker and more ecosystem-friendly option, especially if you already live inside UniFi Network. However, the GL.iNet Mango 2 is the stronger all-round pocket router for most tinkerers, travellers […]

UniFi Travel Router Long-Range vs GL.iNet Mango 2: 2 Compact Routers with Different Priorities The UniFi Travel Router Long-Range and GL.iNet Mango 2 are compact dual-band Wi-Fi 5 routers designed to place several devices behind a familiar private network while using public Wi-Fi, Ethernet or a tethered mobile device as the internet source. Both provide […]

GL.iNet is preparing a much more conventional home mesh router system called Velica, and it is not just another pocket travel router. In our latest NASCompares coverage, we looked at the GL.iNet Velica 7 / Velica Mesh Router System, a WiFi 7 mesh platform built around a larger main hub, smaller satellite nodes, 2.5GbE networking […]

Amazon Prime Big Deal Days 2026 NAS Deals on Synology, QNAP, UGREEN, TerraMaster, Seagate and More That’s right, it’s that time again. Amazon Prime Big Deal Days 2026 is officially underway from October 6th to October 7th, giving Prime members 48 hours of deals across storage, networking, PC hardware and consumer electronics, and effectively acting […]

UniFi Travel Router vs UniFi Travel Router Long-Range: 2 Similar Routers with Different Reach…Literally The UniFi Travel Router and UniFi Travel Router Long-Range are compact dual-band Wi-Fi 5 routers designed to provide a familiar private network while using hotel Wi-Fi, public wireless services, Ethernet or a tethered mobile device as the internet connection. Both models […]

UniFi vs Gl.iNet Pocket Router – Which is Better? Travel routers provide a convenient way to connect several devices through a single wired, wireless or phone-tethered internet connection, while keeping the user’s own network settings and security in place. The UniFi Travel Router and GL.iNet Mango 2 approach this requirement from slightly different positions, but […]

Minisforum MS-03 Workstation Review – Quick Verdict The Minisforum MS-03 is the follow-up to one of the most discussed compact workstation platforms of the last few years. In our review, the headline appeal is clear: a very small system with workstation-style networking, modern Intel Ultra processor options, multiple M.2 slots, Thunderbolt/USB4-class connectivity and enough expansion […]

Video covered: How We DO and DO NOT Want AI in Our NAS (ft. QNAP) from the NASCompares YouTube channel, published 2026-06-11T14:00:12+00:00. This article expands the booth discussion into a practical guide to where AI on NAS is useful, where it becomes risky, and how QNAP is trying to balance local data ownership with AI-assisted […]