Articles on SystemTek’s website that relate to cyber security.
CVE number = CVE-2026-0234 An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during
Read More– An attacker attributed to ArcaneDoor campaign has exploited CVE-2025-20333, CVE-2025-20362, and CVE-2025-20363 to install a sophisticated bootkit for persistent stealthy access to affected devices.
Read More– This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock.
Read More– The Cybersecurity and Infrastructure Security Agency (CISA) released an alert to provide guidance in response to the software supply chain compromise of the Axios node package manager (npm). Axios is an HTTP client for JavaScript that developers commonly use in Node.js and browser environments.
Read More– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiWeb. Authentication is required to exploit this vulnerability.
Read MoreCVE number = CVE-2026-25203 This vulnerability allows local attackers to escalate privileges on affected installations of Samsung MagicINFO 9 Server.
Read More– Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used.
Read More– Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.
Read More– Forest Blizzard, a threat group associated with the Russian military, has been exploiting poorly secured home and small-office internet devices—such as routers—by taking control of them and altering their configurations.
Read More– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus.
Read More
