Szolgáltatóknak

For the first time, SANS Institute's five top attack techniques all have one thing in common – AI.

Organizations disclose attack details, though information may be limited, following a breach, but what if they did the same with close calls?

CVE: CVE-2026-3591 Title: A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass Document version: 2.0 Posting date: 25 March 2026 Program impacted: BIND 9 Versions affected: BIND 9.20.0 -> 9.20.20 9.21.0 -> 9.21.19 BIND Supported Preview Edition 9.20.9-S1 -> 9.20.20-S1 Versions NOT affected: BIND 9.18.0 -> 9.18.46 BIND Supported Preview Edition 9.18.11-S1 -> 9.18.46-S1 Severity: Medium Exploitable: Remotely Description: A use-after-return vulnerability exists in the ...

CVE: CVE-2026-3119 Title: Authenticated query containing a TKEY record may cause named to terminate unexpectedly Document version: 2.0 Posting date: 25 March 2026 Program impacted: BIND 9 Versions affected: BIND 9.20.0 -> 9.20.20 9.21.0 -> 9.21.19 BIND Supported Preview Edition 9.20.9-S1 -> 9.20.20-S1 Versions NOT affected: BIND 9.18.0 -> 9.18.46 BIND Supported Preview Edition 9.18.11-S1 -> 9.18.46-S1 Severity: Medium Exploitable: Remotely Description: Under certain conditions, named may ...

CVE: CVE-2026-3104 Title: Memory leak in code preparing DNSSEC proofs of non-existence Document version: 2.0 Posting date: 25 March 2026 Program impacted: BIND 9 Versions affected: BIND 9.20.0 -> 9.20.20 9.21.0 -> 9.21.19 BIND Supported Preview Edition 9.20.9-S1 -> 9.20.20-S1 Versions NOT affected: BIND 9.18.0 -> 9.18.46 BIND Supported Preview Edition 9.18.11-S1 -> 9.18.46-S1 Severity: High Exploitable: Remotely Description: A specially crafted domain can be used to cause a memory leak i ...

CVE: CVE-2026-1519 Title: Excessive NSEC3 iterations cause high CPU load during insecure delegation validation Document version: 2.0 Posting date: 25 March 2026 Program impacted: BIND 9 Versions affected: BIND 9.11.0 -> 9.16.50 9.18.0 -> 9.18.46 9.20.0 -> 9.20.20 9.21.0 -> 9.21.19 BIND Supported Preview Edition 9.11.3-S1 -> 9.16.50-S1 9.18.11-S1 -> 9.18.46-S1 9.20.9-S1 -> 9.20.20-S1 (Versions prior to 9.11.0 were not assessed.) Severity: High Exploitable: Remotely Description: If a BIND reso ...

Attacks by artificial intelligence agents are a reality. Experts at Nvidia's GTC conference say defenders need to use the same tools to fight them off.

Four former NSA chiefs representing a near-complete history of US Cyber Command debated and discussed the role of offensive cyber in the government.

CVE: CVE-2026-3608 Title: Stack overflow in Kea daemons Document version: 2.0 Posting date: 25 March 2026 Program impacted: Kea Versions affected: Kea 2.6.0 -> 2.6.4 3.0.0 -> 3.0.2 Severity: High Exploitable: Remotely Description: Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. Impact: Loss of DHCP services CVSS Score: 7.5 ...