compromised running

Advice columnist Annie fields a letter about an ongoing household dispute over thermostat settings, which the writer frames as a 'cold war' between family members or housemates. The column offers guidance on compromise and communication in shared living situations. Readers of the long-running advice feature follow such domestic conflicts for both entertainment and practical takeaways.

Dell has released fixes for 37 vulnerabilities in its Container Storage Modules, including six critical flaws. The most serious allow unauthenticated attackers to steal storage administrator credentials and gain root access on Kubernetes nodes. Administrators running Dell storage with Kubernetes are urged to apply the patches promptly to avoid credential theft and full system compromise.

Egyptian President Abdel Fattah Al-Sisi said Egypt remains committed to a diplomatic solution over Ethiopia's Grand Renaissance Dam, but stressed that the country's water security is a red line that cannot be compromised. His remarks underline the ongoing tension between Cairo and Addis Ababa over the Nile dam, which Egypt sees as a threat to its freshwater supply.

The Dutch Institute for Vulnerability Disclosure has reported a security compromise involving two chained vulnerabilities in the open-source ticketing system Zammad. The attack combined session hijacking, remote code execution, privilege escalation and data exfiltration, showing how separate flaws in a single service can be combined into a full intrusion path. Security professionals are circulating the report as a case study in chained exploits and the importance of patching interconnected components.

A group of US senators has clinched a deal on construction permitting reform, reaching agreement just before lawmakers leave Washington for the election campaign period. The agreement would streamline approval processes for building projects, a long-stalled issue. With congressional time running out before the elections, the timing of the breakthrough is drawing attention to whether the deal can advance further.

Microsoft researchers have detailed attacks exploiting a Zimbra command injection vulnerability, CVE-2026-73570, in which a single crafted email is enough to run code on the mail server. The documented attacks involve deploying web shells, gaining root access, and stealing cryptographic keys. Security teams running Zimbra are being urged to patch and review their servers for signs of compromise.

Security reports detail post-exploitation activity targeting Citrix NetScaler appliances, where attackers deploy payloads that create superuser accounts and disguise web shells as CSS-like URLs to evade detection. The technique raises concerns for organisations running NetScaler gateways, as compromised devices may grant persistent privileged access. Administrators are advised to review devices for unexpected accounts and unusual URL patterns.

A security vulnerability has been reported in Unsloth Studio that lets a routine AI model inspection action escalate into arbitrary code execution on a user's machine. The flaw means simply examining an untrusted model could compromise the system running it. Details on the affected versions, discovery, and patch status remain sparse as the story circulates among security and AI developer communities.

Security researchers are flagging CVE-2026-102147, a critical vulnerability in Kiteworks Core carrying a CVSS score of 9.3. The flaw is a stored cross-site scripting weakness that could let an unauthenticated attacker plant crafted content which then executes arbitrary JavaScript in the session of an administrator who views it, potentially giving attackers privileged access. Organizations running Kiteworks are urged to review the advisory and apply patches.

A bipartisan group of US senators has reached an agreement on a bill to reform permitting for energy projects, with a vote expected after November. The legislation aims to speed up approvals for power lines, pipelines and other infrastructure. Details of the compromise and its chances of passing remain to be seen, and the proposal is likely to draw scrutiny from both environmental groups and industry.

Cisco has released patches for a zero-day vulnerability in its Catalyst SD-WAN software that was being actively exploited, according to a report by SecurityWeek. The flaw allowed attackers to compromise affected SD-WAN devices. Administrators are urged to apply the updates promptly, and details about the exploitation campaign remain limited.

Adventist Today is examining whether the Seventh-day Adventist Church maintains close institutional ties to the United Nations. The question touches on a long-running debate within the denomination, where some members worry that official engagement with UN bodies, including its status as an NGO, could compromise the church's independence, while others see advocacy work as consistent with its humanitarian mission. The publication invites readers to weigh the evidence behind the claim.

Kiteworks has patched an undisclosed critical vulnerability after federal intelligence warned of an imminent attack, prompting the company to shut down servers globally. All hosted instances have been restored, and no evidence of compromise has been reported. Operators running on-premises Kiteworks deployments are being urged to prioritize applying the patch to protect their systems.