CISA: Critical VMware RCE flaw now exploited by ransomware gangs

🕵️ RESEARCH & DEEP DIVES

• Firefox Enterprise Policies privilege escalation bug fixed in Firefox 156 and ESR 153.3
  Mozilla has fixed a privilege escalation vulnerability in Firefox's Enterprise Policies component.

  • Affects Firefox users, including organizations deploying Firefox via Enterprise Policies
  • The flaw is a privilege escalation in the Enterprise Policies component, tracked as CVE-2026-92073
  • The vulnerability was fixed in Firefox 156 and Firefox ESR 153.3; credited to Tyler Maclachlan
  Sources 📄 Source: mozilla.org · 📎 Coverage: cve.threatint.com · 👁 via CVE ThreatInt

• CVE-2026-92070: Information disclosure flaw in Firefox Networking component fixed in Firefox 156 and ESR 153.3
  Mozilla fixed an information disclosure vulnerability in the Firefox Networking component, tracked as CVE-2026-92070.

  • Affects Firefox users; the flaw resides in the browser's Networking component and allows information disclosure.
  • The vulnerability is fixed in Firefox 156 and Firefox ESR 153.3; both versions are listed as unaffected.
  • The issue is tracked as CVE-2026-92070, published 2026-09-15 with Mozilla as CVE assigning partner, and is credited to researcher Mohamed Mbarek.
  Sources 📄 Source: mozilla.org · 📎 Coverage: cve.threatint.com · 👁 via CVE ThreatInt

• Firefox DOM Navigation spoofing vulnerability (CVE-2026-92069) fixed in Firefox 156 and ESR 153.3
  Mozilla fixed a spoofing vulnerability in the DOM Navigation component in Firefox 156 and Firefox ESR 153.3.

  • Applies to Firefox users, including Firefox ESR deployments
  • A spoofing issue in the DOM: Navigation component allows UI spoofing
  • Tracked as CVE-2026-92069, assigned by Mozilla and published 2026-09-15
  • The flaw is fixed in Firefox 156 and Firefox ESR 153.3; earlier versions are affected
  Sources 📄 Source: mozilla.org · 📎 Coverage: cve.threatint.com · 👁 via CVE ThreatInt

• Firefox 156 fixes sandbox escape vulnerability in Profile Backup component (CVE-2026-92066)
  Mozilla fixed a sandbox escape in Firefox's Profile Backup component with the Firefox 156 release.

  • Affects Firefox users; the flaw resides in the browser's Profile Backup component and is tracked as CVE-2026-92066
  • The bug is a sandbox escape, allowing code to break out of Firefox's sandboxed environment
  • The vulnerability was fixed in Firefox 156 (156 rpm build listed as unaffected)
  • The issue was assigned by Mozilla and publicly published on 2026-09-15
  Sources 📄 Source: mozilla.org · 📎 Coverage: cve.threatint.com · 👁 via CVE ThreatInt

• CVE-2026-92061: Incorrect boundary conditions in Firefox process sandboxing fixed in Firefox 156
  A Firefox vulnerability caused by incorrect boundary conditions in the Process Sandboxing component was fixed in Firefox 156.

  • Applies to Mozilla Firefox users; the flaw was fixed in Firefox 156.
  • Tracked as CVE-2026-92061: incorrect boundary conditions in the Security: Process Sandboxing component.
  • CVE reserved and published 2026-09-15, assigned by Mozilla; details disclosed via Mozilla advisory MFSA 2026-90 and Bugzilla bug 2041758.
  Sources 📄 Source: mozilla.org · 📎 Coverage: cve.threatint.com · 👁 via CVE ThreatInt

• Mozilla fixes incorrect boundary conditions flaw in Firefox DOM Editor (CVE-2026-92059)
  Mozilla patched an incorrect boundary conditions vulnerability in the DOM Editor component, fixed in Firefox 156 and Firefox ESR 153.3.

  • Applies to users of Firefox and Firefox ESR.
  • The flaw is incorrect boundary conditions in the DOM: Editor component, tracked as CVE-2026-92059 and assigned by Mozilla.
  • Fixed versions are Firefox 156 and Firefox ESR 153.3; earlier releases are affected.
  • Documented in Mozilla advisories MFSA 2026-90 and MFSA 2026-93 and Bugzilla bug 2068442, published 2026-09-15.
  Sources 📄 Source: mozilla.org · 📎 Coverage: cve.threatint.com · 👁 via CVE ThreatInt

• What Zero-Day Response Should Be in the Post-Mythos Era — BleepingComputer

• CISA: Critical VMware RCE flaw now exploited by ransomware gangs — BleepingComputer

• Thai Broadband Provider Hacked via Fortinet Vulnerability — SecurityWeek

• OpenAI Investigates Report Linking AI Agents to RubyGems Attack — SecurityWeek

• Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds — The Hacker News

• Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point — The Hacker News

• Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers — The Hacker News

• Incorrect boundary conditions in the Safe Browsing componentIncorrect boundar... — CVE ThreatInt

• Sandbox escape due to incorrect boundary conditions in the Widget: Win32 comp... — CVE ThreatInt

• Site isolation issue in the Reader Mode componentSite isolation issue in the ... — CVE ThreatInt

• Use-after-free in the Widget: Gtk componentUse-after-free in the Widget: Gtk ... — CVE ThreatInt

• Denial-of-service in the Audio/Video componentDenial-of-service in the Audio/... — CVE ThreatInt

• Privilege escalation in the Session Restore componentPrivilege escalation in ... — CVE ThreatInt

• Use-after-free in the Internationalization componentUse-after-free in the Int... — CVE ThreatInt

• Use-after-free in the Graphics componentUse-after-free in the Graphics compon... — CVE ThreatInt

• Mitigation bypass in the Enterprise Policies componentMitigation bypass in th... — CVE ThreatInt

• Use-after-free in the Graphics: Text componentUse-after-free in the Graphics:... — CVE ThreatInt

• Privilege escalation in the DevTools componentPrivilege escalation in the Dev... — CVE ThreatInt

• Privilege escalation in the Memory componentPrivilege escalation in the Memor... — CVE ThreatInt

• Have it both ways: stay discoverable in search while disallowing AI training — Cloudflare Blog

• Give every teammate and agent the right level of access to your Workers — Cloudflare Blog

• Akamai a Strong Performer in 2026 Gartner Peer InsightsTM Report for SEB — Akamai Blog

• • *Homebrew 7.0.0 Adds Built-In Vulner