Skip to content
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Ravie LakshmananAug 20, 2026Vulnerability / Application Security Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers… 

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

Ravie LakshmananAug 20, 2026Network Security / Enterprise Security Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing… 

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

Ravie LakshmananAug 20, 2026Vulnerability / Email Security A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability… 

Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS) terminal reads over near-field communication…