News
AI, startups, tech and digital transformation — Kazakhstan & the world
Juniper disclosed a critical remote code execution (RCE) vulnerability in the Junos OS Evolved operating system for PTX series routers. The CVSS criticality rating is 9.8 out of 10. Although there has not yet been a widespread distribution of exploits, the threat concerns telecommunications operators and data centers around the world, including organizations in Central Asia.
On March 20, 2026, the DoJ, in collaboration with Canadian and German authorities, took down the command servers of the AISURU, Kimwolf, JackSkid, and Mossad botnets. The operation prevented hundreds of thousands of attacks, including hyper-volumetric strikes of 30 Tbps. This is critical for businesses: such attacks can disable cloud services and infrastructure, necessitating immediate IoT device security enhancements.
On March 18, 2026, the University of California, Berkeley, warned of high-critical vulnerabilities in Atlassian's self-hosted products, including Jira and Confluence. These flaws allow hackers to inject OS commands, bypass file paths, and cause denial of service. The issue is pressing today, as thousands of companies in Central Asia use these tools for project management, risking data breaches and downtime.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on March 19, 2026, urgently recommended patching two critical vulnerabilities in popular systems. CVE-2025-66376 in Zimbra Collaboration Suite allows arbitrary code execution, and CVE-2026-20963 in Microsoft SharePoint allows deserialization of untrusted data with a CVSS of 8.8. This is important now, as attacks are already underway, and Interlock ransomware has been exploiting a zero-day in Cisco since January 26. Businesses in Central Asia should check their systems for these vulnerabilities.
The vulnerability is a buffer overflow in the LINEMODE Set Local Characters (SLC) handler and can be exploited during the initial handshake of the connection, even before the login prompt appears. A fix is expected by April 1, 2026. This is the second critical vulnerability in telnetd in two months, with the previous CVE-2026-24061 already actively exploited in the wild.
Stryker officially confirmed the cyber incident in an SEC filing, reporting the breach in the Microsoft environment without signs of ransomware. The company restored systems by March 17, but the incident revealed vulnerabilities in identity management through Intune. This is the first major attack by pro-Iranian hackers on the U.S. linked to the Middle East conflict.
Vulnerabilities in Skia and V8 enable remote code execution via a malicious website. This poses a critical threat to browsers used in corporate networks. Companies are urgently patching systems to prevent mass compromises. The incident is relevant today, as exploits are spreading rapidly.
© 2024 Alashed IT. Все права защищены.
it.alashed.kz
