New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

The Hacker News - Sep 22, 2026

Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a VeloCloud SD-WAN, Arista said on September 22. The flaw, tracked as CVE-2026-93952, may allow a remote attacker with no login access to privilege internal functions and affect the VCO host. Only orchestrators set up to authenticate their Edges with certificates are

Read full article

More News

Starship flight 14: Why SpaceX's first-ever orbital test matters to NASA's Artemis

Sep 22, 2026

Starship flight 14: Why SpaceX's first-ever orbital test matters to NASA's Artemis

Starship flight 14: Why SpaceX’s first-ever orbital test matters to NASA’s Artemis SpaceX is preparing for a defining moment with the first-ever orbital launch using Starship flight 14. The critical mission is also significant for NASA Artemis mission that could determine whether...

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

Sep 22, 2026

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa. The flaw, CVE-2026-65660, affects SharePoint Server 2016, 2019, and Subscription Edition. Patches have been

This major California river has gotten too warm for its salmon

Sep 22, 2026

This major California river has gotten too warm for its salmon

The Sacramento River has gotten too warm for salmon eggs. Environmental advocates blame the Trump administration for taking too much water out of Shasta Lake.

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

Sep 22, 2026

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors are likely shifting tactics in response to recent security controls. "Indexed-btree is a malicious npm package mimicking the legit sorted-btree package, an ordinary B-tree/indexing utility," Checkmarx said. "

Nothing to spin off CMF as standalone Indian business; Optiemus to acquire 51.1% controlling stake; details here

Sep 22, 2026

Nothing to spin off CMF as standalone Indian business; Optiemus to acquire 51.1% controlling stake; details here

Nothing is expanding its partnership with Optiemus to turn CMF into an independent, majority Indian-owned smartphone brand. Optiemus will join CMF’s upcoming Series A funding round, while manufacturing, ownership and R&D will come under a single India-based entity.

What to Know About Recent A.I. Hacks

Sep 22, 2026

What to Know About Recent A.I. Hacks

OpenAI, Google and others recently disclosed breaches by their artificial intelligence models that amplified concerns about the advancing capabilities of the technology.

How to Split Expenses on a Group Trip Without Fighting

Sep 22, 2026

How to Split Expenses on a Group Trip Without Fighting

From bachelorette trips to family vacations, group travel can cause relationship-ending fallouts. Here’s how to navigate difficult conversations about finances.

As Computers Take the Driver’s Seat, Experts Worry About Safety

Sep 22, 2026

As Computers Take the Driver’s Seat, Experts Worry About Safety

Self-driving systems are getting so good that drivers may overestimate the technology and not be prepared to respond when something goes wrong.

BTN EXCLUSIVE: Inside Etihad’s vision for the future at Arabian Travel Market

Sep 22, 2026

BTN EXCLUSIVE: Inside Etihad’s vision for the future at Arabian Travel Market

An immersive virtual tour of Etihad Airways’ Arabian Travel Market 2026 stand offers a closer look at the aircraft cabins, lounge concepts and new products shaping the Abu Dhabi carrier’s next phase of growth.

OnePlus N6 Lite 4G with 7,000mAh battery, 120Hz display launched in India: Check price, specs

Sep 22, 2026

OnePlus N6 Lite 4G with 7,000mAh battery, 120Hz display launched in India: Check price, specs

OnePlus N6 Lite 4G has been launched in India at ₹16,999, featuring a 6.75-inch 120Hz display and 7,000mAh battery. The smartphone is powered by the Unisoc T7250 chipset with 4GB RAM and 64GB storage, expandable via microSD.

China eyes chip-industry foothold with a tiny Han Xin code to challenge US standard

Sep 22, 2026

China eyes chip-industry foothold with a tiny Han Xin code to challenge US standard

China is attempting to breathe new life into its nearly 20-year-old Han Xin code by promoting a miniaturised version to use on semiconductors, marking the latest chapter in Beijing’s long-running attempt to secure a foothold for its home-grown standards in global industrial supply chains. The State Administration for Market Regulation (SAMR) said on Monday that the “Micro Han Xin” code – a scaled-down iteration of the 2007-era symbology – had entered the formal international standardisation...

It's almost the end of September. Where are all the hurricanes?

Sep 22, 2026

It's almost the end of September. Where are all the hurricanes?

There have only been six named storms this Atlantic hurricane season so far, and most of them only lasted a couple of days. What’s going on? Where’s all the hurricane activity?

Recommended

Still Surge

Let your "surge" of emotions burst forth when reading the news articles acknowledging the beauty and vastness of Science and futuristic Technologies.

NEWSLETTER
ABOUT US

Copyright © 2015 - 2026 Still Surge. All Rights Reserved.