Cyprus is a beautiful country, and it was a great pleasure to visit Nicosia for The Future of Cybersecurity 2026, organized by Data Ally on 23 September.
During my speaking engagement, I had the opportunity to showcase the latest SecPoint Penetrator Vulnerability Scanner and demonstrate how organizations can identify security vulnerabilities across networks, servers, web applications, and exposed services.
SecPoint Penetrator combines advanced CVE detection, authenticated Windows vulnerability...
https://www.youtube.com/watch?v=lhZH7SHX7jk
SecPoint Penetrator V69: Full Firmware Release Overview
SecPoint Penetrator V69 introduces new features and improvements to vulnerability assessment, penetration testing, reporting, and security administration.
In this video, we demonstrate the key enhancements introduced in Penetrator V69, including the updated Scan Map with Dark Mode, the new One-Page VAPT Security Assessment Certificate, and improvements to vulnerability reporting.
What's new in...
WatchGuard Fireware OS: Critical Firewall Vulnerabilities and New Penetrator Checks
On 27 October 2026, WatchGuard disclosed serious vulnerabilities affecting Fireware OS, including CVE-2026-93857, CVE-2026-93865 and CVE-2026-93866. All three are rated Critical (CVSS 9.2).
Depending on configuration, the flaws may permit unauthenticated code execution through the SIP proxy, privileged FireCluster actions or Access Portal memory corruption.
SecPoint Penetrator now includes targeted remote Watc...
HashiCorp Consul: Critical Service Mesh Security Vulnerabilities
On 26 October 2026, HashiCorp disclosed serious authorization vulnerabilities affecting Consul and consul-k8s.
CVE-2026-105765 may expose cached service certificates and private keys through accessible Consul agent APIs without a valid ACL token.
CVE-2026-110720 may allow attackers with specific Kubernetes permissions to obtain elevated Consul privileges.
SecPoint Penetrator delivers comprehensive remote vulnerability scanning ...
https://www.youtube.com/watch?v=WWmovZK_sdI
SecPoint Penetrator V69: New One-Page Security Assessment Certificate
SecPoint Penetrator V69 introduces a new One-Page Certificate for Vulnerability Assessment and Penetration Testing (VAPT) technical-readiness assessments.
In this video, we demonstrate the new certificate option and how administrators can generate professional assessment documentation directly from the Report menu.
The new certificate includes:
✔ Overall vulnerability assessment...
HPE Aruba Networking: 72 Critical Security Vulnerabilities Disclosed!
On 22 October 2026, HPE disclosed 72 vulnerabilities affecting ArubaOS AOS-8 and AOS-10, including eight with the maximum CVSS score of 10.0.
Several vulnerabilities could allow unauthenticated attackers to bypass authentication or execute malicious code on potentially affected wireless controllers, gateways and access points. Some attack scenarios require additional preconditions.
Organizations should restrict management i...
eMudhra Certificate Trust Incident: Remote TLS Checks in SecPoint Penetrator
On 20 October 2026, Mozilla and Google disclosed weak private keys affecting eight eMudhra intermediate CAs, including six TLS issuers.
The affected intermediates issued no customer certificates, but browser vendors have blocked them and are removing trust in the related G3 root hierarchy.
SecPoint Penetrator's new remote checks inspect server-presented TLS certificate chains for exact affected eMudhra fingerprints a...
Critical Arista VeloCloud Vulnerability Under Active Exploitation
Arista has disclosed CVE-2026-114625, a critical SQL injection vulnerability (CVSS 9.9) affecting VeloCloud Orchestrator.
Attackers with even low-privilege portal access may escalate to superuser operator privileges, potentially compromising business-critical SD-WAN infrastructure.
Active exploitation has been confirmed. Organizations should review potentially affected on-premises deployments and upgrade to the appropriate fixe...
Critical GitLab Vulnerability: CVE-2026-110264 (CVSS 10.0)
GitLab disclosed a critical flaw on 21 October 2026 affecting self-managed GitLab Community and Enterprise Edition.
Under certain conditions, an unauthenticated attacker could execute code through an integer overflow in the regular-expression compiler.
Is your GitLab infrastructure exposed?
Scan with SecPoint Penetrator™.
SecPoint Penetrator helps identify exposed services, outdated software, and security weaknesses through actionab...
Is your Node.js application vulnerable to CVE-2026-111497?
A newly disclosed High-severity vulnerability in the Node.js Brotli decoder could allow remote code execution when attacker-controlled compressed data reaches the affected component.
Don't leave your infrastructure unchecked. Scan with SecPoint Penetrator™.
SecPoint Penetrator helps organizations discover exposed services, identify outdated software and prioritize vulnerabilities with actionable security reports.
Our new Node.js asse...
