Skip to main content
IMMUNITYSEC

Defensive Engineering News & Analysis

Practical defensive engineering content: detection rule authoring, threat hunting guidance, incident response and remediation steps for actively exploited vulnerabilities, and use of the CISA Known Exploited Vulnerabilities catalog to prioritize patching.

Defensive Engineering News & Analysis Articles

2 Articles
Defensive Engineering News & Analysis
2026-08-27•6 min read

CISA KEV August 2026: Citrix NetScaler CVE-2026-8452 and Five Legacy Flaws Now Actively Exploited

CISA added six vulnerabilities to its Known Exploited Vulnerabilities catalog on August 26, 2026, led by CVE-2026-8452 in Citrix NetScaler ADC and Gateway. Five older flaws across Red Hat Linux, Microsoft SQL Server, Ajax.NET Professional, and the Linux kernel were also confirmed as active attack paths. CISA adds a vulnerability to the catalog only when there is reliable evidence of active exploitation.

Defensive Engineering News & Analysis
2026-08-18•7 min read

vCenter CVE-2026-59310: Suspected China-Nexus APT Compromises 361 Victim IPs in 47 Countries

A suspected China-nexus APT exploited CVE-2026-59310, a CVSS 9.8 directory traversal to RCE flaw in VMware vCenter Server, to plant backdoors on vCenter Server Appliances, with Babuk-derived ransomware found on ESXi hosts in one analyzed environment. German IR firm QUIRSO tracked 361 victim IPs across 47 countries. Patching alone does not evict established footholds.

Related

Tool categories

Cloud Security ToolsDigital ForensicsGRC SoftwareIAM ToolsSIEM ToolsSoftware Composition Analysis Tools