CyStack

@CyStackSecurity

An innovative #Cybersecurity company provides comprehensive and tailored solutions to combat security threats. Product: @whitehubnet @lockerpm

Hà Nội, Việt Nam

cystack.net

Joined September 2017

Replies Reposts Media

CyStack
@CyStackSecurity
Sep 17
CVE-2026-75889: Arbitrary file read in Grafana Alloy, the open-source telemetry agent from Grafana Labs that runs inside Kubernetes. ServiceMonitor's bearerTokenFile field carries straight through into the scrape job. Point it at Alloy's own service account token, aim the scrape
CyStack
@CyStackSecurity
Sep 15
CVE-2026-76356: IP-spoofing auth bypass in the Automation Broker of Splunk SOAR, the SOAR platform used to automate incident response. The broker trusts a client-supplied source IP header as proof of a local request. Spoof it, reach privileged functionality, no authentication
CyStack
@CyStackSecurity
Sep 10
CVE-2026-61783: RBAC flaw in Wazuh Manager exposes cluster.key, the secret that authenticates inter-node cluster traffic. The masking check only looks for a config-update RBAC rule, not whether it allows or denies the action. Attaching a deny rule is enough to get the raw key
CyStack
@CyStackSecurity
Sep 3
CVE-2026-8715: Arbitrary file read in HashiCorp's Vault Secrets Operator, the Kubernetes operator that syncs secrets from Vault. The secretIDPath field never restricted which files it could point to. A namespaced tenant points it at a sensitive file on the operator pod, pairs it
CyStack
@CyStackSecurity
Aug 25
CVE-2026-59119: Privilege escalation flaw in Microsoft PowerShell, the command-line tool installed by default on most Windows systems. Overly broad default permissions on an internal operation. An attacker with a local foothold, even at low privilege, exploits it to gain SYSTEM.