CyStack

@CyStackSecurity

An innovative #Cybersecurity company provides comprehensive and tailored solutions to combat security threats. Product: @whitehubnet @lockerpm

Hà Nội, Việt Nam

cystack.net

Joined September 2017

Replies Reposts Media

CyStack
@CyStackSecurity
Sep 3
CVE-2026-8715: Arbitrary file read in HashiCorp's Vault Secrets Operator, the Kubernetes operator that syncs secrets from Vault. The secretIDPath field never restricted which files it could point to. A namespaced tenant points it at a sensitive file on the operator pod, pairs it
CyStack
@CyStackSecurity
Aug 25
CVE-2026-59119: Privilege escalation flaw in Microsoft PowerShell, the command-line tool installed by default on most Windows systems. Overly broad default permissions on an internal operation. An attacker with a local foothold, even at low privilege, exploits it to gain SYSTEM.
CyStack
@CyStackSecurity
Aug 20
CyStack and NTQ Solution have launched Sentrix, a joint venture delivering full-lifecycle cybersecurity to global enterprises. Combining research and offensive security depth from CyStack and delivery and operations across 20+ countries from NTQ, Sentrix provides reliable and
CyStack
@CyStackSecurity
Aug 18
CVE-2026-58040: TLS session reuse in Node.js's HTTPS Agent can skip hostname verification. An incomplete fix for CVE-2026-48934. Reuse a session across different identity policies and the certificate check for the new host gets bypassed. Affects 22.x, 24.x, 26.x. Patched in
CyStack
@CyStackSecurity
Aug 13
3 vulnerabilities in RabbitMQ, the open-source message broker widely used in microservices architectures, finance, and e-commerce systems. CVE-2026-67415: Atom exhaustion via the Shovel plugin, pushing the broker into prolonged DoS, requires a restart. CVE-2026-67366: The