Intel Center

Cloud & IdentityMEDIAAltoNEWGDPRNIS2Inteligencia operacional

Meari IoT Cloud Platform OpenAPI Service

View CSAF Summary Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization. The following versions of Meari IoT Cloud Platform OpenAPI Service are affected: IoT Cloud Platform OpenAPI Service vers:all/* (CVE-2026-101104, CVE-2026-96613) CVSS Vendor Equipment Vulnerabilities v3 7.7 Meari Meari IoT Cloud Platform OpenAPI Service Missing Authorization Background Critical Infrastructure Sectors: Commercial Facilities, Information Technology Countries/Areas Deployed: Worldwide Company Headquarters Location: China Vulnerabilities Expand All + CVE-2026-101104 The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering unintended behaviors, without verifying ownership or permissions. View CVE Details Affected Products Meari IoT Cloud Platform OpenAPI Service Vendor: Meari Product Version: Meari IoT Cloud Platform OpenAPI Service: vers:all/* Product Status: known_affected Remediations No fix planned Meari did not respond to CISA's coordination attempts. IoT Cloud Platform OpenAPI users are advised to contact Meari for support https://www.meari.com/en/downLoadCenter. Relevant CWE: CWE-862 Missing Authorization Metrics CVSS Version Base Score Base Severity Vector String 3.1 7.7 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N 4.0 6.3 MEDIUM CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N CVE-2026-96613 The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitiv CVEs: CVE-2026-101104, CVE-2026-96613. Vendors: Meari Product Version: Meari IoT Cloud Platform OpenAPI Service: vers:all/* Product Status: known_affected Remediations No fix planned Meari did not respond to CISA's coordination attempts, GitHub. DORA relevance: medium.

Cloud & IdentityMEDIAAltoNEWHIPAAGDPRInteligencia operacional

AI agents keep access to company data after their work is done

IT teams responsible for identity security are concerned about AI agents’ ongoing access to company systems and the actions they take on users’ behalf, according to a Delinea’s 2026 Identity Security Report: The AI Enforcement Gap. “Written policy is only as good as your ability to enforce it at the moment an AI agent acts,” said Art Gilliland, CEO of Delinea. “Our research echoes what I hear from leaders constantly: they have the AI policies … More → The post AI agents keep access to company data after their work is done appeared first on Help Net Security. CVEs: CVE-2026-76504, CVE-2026-88772. Vendors: Cisco, Google, Citrix, Kubernetes. DORA relevance: medium.

Por qué importa

Los agentes de IA mantienen acceso persistente a datos corporativos tras finalizar sus tareas, creando un riesgo crítico de escalada de privilegios y exposición de datos sensibles bajo normativas GDPR/HIPAA.

Acción recomendada

Audita los permisos y tokens de acceso de los agentes de IA en entornos cloud y revisa la configuración de ciclo de vida de sesiones para mitigar el acceso no autorizado.

Vendors:CiscoGoogleCitrixKubernetesMITRE:T1078 Valid AccountsCISO · Cloud Security · SecOps

Mapeo regulatorio · riesgo 75

El acceso persistente y potencialmente excesivo de agentes de IA a datos corporativos puede incumplir los principios de protección desde el diseño, procesamiento bajo instrucciones y seguridad adecuada al riesgo.

GDPR · Art. 25 Data protection by design and by default (direct) · Art. 29 Processing under the authority of the controller or processor (direct) · Art. 32 Security of processing (direct)

Publicado: 02 oct 2026, 04:30
Actualizado: 02 oct 2026, 06:00
Detectado: 02 oct 2026, 06:00
Fuente: Help Net Security
Referencia técnica: NVD · CVE-2026-76504

Cloud & IdentityMEDIAAltoNEWGDPRInteligencia operacional

Android 17 makes it harder for spyware to cover its tracks

When a journalist suspects their phone has been hacked, the first question is whether any trace of the attack is left. Google has added six features to Advanced Protection in Android 17, including one that keeps a copy of that evidence off the device. Existing users will receive a notification when the new capabilities become available on their devices. Forensic logging and data retention Intrusion Logging records security and network events, including app activity. Users … More → The post Android 17 makes it harder for spyware to cover its tracks appeared first on Help Net Security. CVEs: CVE-2026-76504, CVE-2026-88772. Vendors: Cisco, Google, Citrix. DORA relevance: medium.

Por qué importa

Se han reportado vulnerabilidades asociadas a múltiples proveedores (Cisco, Google, Citrix) en el contexto de nuevas capacidades de seguridad de Android 17, lo que requiere validación de exposición.

Acción recomendada

Audita el inventario de activos para identificar sistemas afectados por CVE-2026-76504 y CVE-2026-88772 y notifica a los responsables de infraestructura de Cisco, Google y Citrix.

Vendors:CiscoGoogleCitrixSectores:cloud/SaaSretailCISO · Cloud Security · SecOps

Publicado: 02 oct 2026, 05:30
Actualizado: 02 oct 2026, 06:00
Detectado: 02 oct 2026, 06:00
Fuente: Help Net Security
Referencia técnica: NVD · CVE-2026-76504

Cloud & IdentityMEDIAAltoNEWGDPRInteligencia operacional

Kiteworks patches max severity code injection vulnerability

Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security solution. [...] CVEs: CVE-2026-54154. Vendors: Microsoft, Oracle, Apple, Citrix, Atlassian, MikroTik. DORA relevance: medium.

Por qué importa

Se ha identificado una vulnerabilidad de inyección de código de severidad máxima en Kiteworks EPG que requiere parcheo inmediato para evitar la ejecución remota de comandos.

Acción recomendada

Identifica y actualiza inmediatamente todas las instancias de Kiteworks EPG y audita los logs en busca de intentos de explotación.

Vendors:KiteworksMicrosoftOracleAppleSectores:public sectorhealthcarecloud/SaaSMITRE:T1190 Exploit Public-Facing ApplicationCISO · Cloud Security · SecOps

Publicado: 01 oct 2026, 13:51
Actualizado: 01 oct 2026, 16:02
Detectado: 01 oct 2026, 16:02
Fuente: BleepingComputer
Referencia técnica: NVD · CVE-2026-54154

Cloud & IdentityMEDIAAltoNEWGDPRNIS2AI ACTInteligencia operacional

One year later: Sovereign AI and the fight for choice

AI sovereignty is not a zero-sum game, but many governments now believe it is. Cloudflare's answer: more local open-source models, model-agnostic security tools, and a commitment to giving nations genuine choice. CVEs: CVE-2023-50387. Vendors: Microsoft, Google, AWS, CrowdStrike, Apple, Atlassian, GitHub, Apache, Mozilla, Kubernetes, Okta, WordPress, OpenSSL, PHP, Node.js, Python, IBM, Elastic, PostgreSQL, MySQL, NGINX, Grafana, HashiCorp, Cloudflare. DORA relevance: high.

Por qué importa

El informe aborda la soberanía de la IA y la seguridad en la cadena de suministro, destacando la necesidad de resiliencia operativa bajo marcos como DORA y NIS2 ante la dependencia de múltiples proveedores tecnológicos.

Acción recomendada

Audita el inventario de activos frente a la CVE-2023-50387 y revisa los controles de seguridad en la cadena de suministro de IA según las directrices de cumplimiento vigentes.

Vendors:MicrosoftGoogleAWSCrowdStrikeSectores:bankingpublic sectorcloud/SaaSretailCISO · Cloud Security · SecOps

Mapeo regulatorio · riesgo 35

La presencia de la CVE-2023-50387 y la necesidad de revisar la gestión de vulnerabilidades hacen aplicable la divulgación coordinada de vulnerabilidades bajo NIS2, aunque no se evidencia explotación ni incidente.

NIS2 · Art. 12 Coordinated vulnerability disclosure and a European vulnerability database (direct)

Publicado: 01 oct 2026, 13:04
Actualizado: 01 oct 2026, 16:01
Detectado: 01 oct 2026, 16:01
Fuente: Cloudflare Blog Security
Referencia técnica: NVD · CVE-2023-50387

Cloud & IdentityMEDIAAltoNEWGDPRInteligencia operacional

Armadin raises $255.5 million to expand AI offensive security platform

Armadin has raised $255.5 million in Series B funding co-led by Andreessen Horowitz (a16z) and Accel that brings the company’s valuation to over $2.5 billion. The round includes participation from new investors Bain Capital Ventures (BCV) and Redpoint. Existing investors 8VC, Ballistic Ventures, Google Ventures, In-Q-Tel, Kleiner Perkins, and Menlo Ventures also returned, reflecting their continued confidence, bringing Armadin’s total funding to $445 million. Seven months after emerging from stealth, Armadin is running agentic attack … More → The post Armadin raises $255.5 million to expand AI offensive security platform appeared first on Help Net Security. CVEs: CVE-2026-76504, CVE-2026-88772. Vendors: Cisco, Google, Citrix. DORA relevance: medium.

Por qué importa

Se han identificado vulnerabilidades críticas asociadas a proveedores clave (Cisco, Google, Citrix) que requieren validación inmediata en el inventario de activos.

Acción recomendada

Auditar el inventario de activos para identificar versiones afectadas de Cisco, Google y Citrix y aplicar los parches de seguridad correspondientes.

Vendors:CiscoGoogleCitrixSectores:public sectorcloud/SaaSMITRE:T1190 Exploit Public-Facing ApplicationCISO · Cloud Security · SecOps

Publicado: 01 oct 2026, 11:16
Actualizado: 01 oct 2026, 15:02
Detectado: 01 oct 2026, 15:02
Fuente: Help Net Security
Referencia técnica: NVD · CVE-2026-76504

Cloud & IdentityMEDIAAltoNEWGDPRInteligencia operacional

Legit Security extends automated fixes to vulnerable open-source dependencies

Legit Security has announced an expansion of its Agentic Remediation capability to cover vulnerabilities found in open-source dependencies, not just first-party code, enabling development teams to move from vulnerability detection to a verified fix without manual triage. The expansion addresses a growing gap in application security: as AI-generated code accelerates software delivery, most modern codebases are made up largely of open-source dependencies, and every new package introduces potential exposure to known vulnerabilities. Traditional find-it, fix-it … More → The post Legit Security extends automated fixes to vulnerable open-source dependencies appeared first on Help Net Security. CVEs: CVE-2026-76504, CVE-2026-88772. Vendors: Cisco, Google, Citrix. DORA relevance: medium.

Por qué importa

Se han identificado vulnerabilidades en dependencias de código abierto que afectan a productos de Cisco, Google y Citrix, requiriendo validación de exposición en el inventario.

Acción recomendada

Audita el inventario de software para identificar la presencia de CVE-2026-76504 y CVE-2026-88772 y aplica los parches recomendados por los proveedores.

Vendors:CiscoGoogleCitrixSectores:cloud/SaaSMITRE:T1195 Supply Chain CompromiseCISO · Cloud Security · SecOps

Publicado: 01 oct 2026, 13:04
Actualizado: 01 oct 2026, 15:02
Detectado: 01 oct 2026, 15:02
Fuente: Help Net Security
Referencia técnica: NVD · CVE-2026-76504

Cloud & IdentityMEDIAAltoNEWGDPRInteligencia operacional

Exabeam brings AI-assisted security investigations to data that must stay on-premises

Exabeam has introduced a new wave of capabilities that bring the Agentic SOC to life in the cloud and on-premises environments, combining AI-driven investigation, execution, and governance. Analyst workflows alone can’t keep pace with machine-speed threats or the growing complexity of goal-driven AI agents and autonomous workflows. The future of the SOC is agentic. For more than a decade, Exabeam has built applied machine learning into security operations, beginning with its pioneering work in user … More → The post Exabeam brings AI-assisted security investigations to data that must stay on-premises appeared first on Help Net Security. CVEs: CVE-2026-76504, CVE-2026-88772. Vendors: Cisco, Google, Citrix, GitHub, Elastic. DORA relevance: medium.

Por qué importa

Se han reportado vulnerabilidades asociadas a múltiples proveedores críticos en el ecosistema, requiriendo validación de inventario.

Acción recomendada

Verificar la presencia de los activos afectados (Cisco, Google, Citrix, GitHub, Elastic) y aplicar parches si las versiones son vulnerables.

Vendors:CiscoGoogleCitrixGitHubSectores:cloud/SaaSCISO · Cloud Security · SecOps

Publicado: 01 oct 2026, 13:50
Actualizado: 01 oct 2026, 15:02
Detectado: 01 oct 2026, 15:02
Fuente: Help Net Security
Referencia técnica: NVD · CVE-2026-76504

What your team should look at right now

CISA Launches Cybersecurity Awareness Month: Securing the Next 250

Meari IoT Cloud Platform OpenAPI Service

Warlock Ransomware Hits Large Spanish, Portuguese Orgs

South Africa Seeks Help After Cyberattack Targets Air Traffic Control

Japan's Keio confirms ransomware attack disrupted business systems

JadePuffer agentic AI attacks target Azure, destroy cloud resources

Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

AI agents keep access to company data after their work is done

Android 17 makes it harder for spyware to cover its tracks

Kiteworks patches max severity code injection vulnerability

One year later: Sovereign AI and the fight for choice

Armadin raises $255.5 million to expand AI offensive security platform

Legit Security extends automated fixes to vulnerable open-source dependencies

Exabeam brings AI-assisted security investigations to data that must stay on-premises