network administration

A whistleblower who raised concerns about Howard Lutnick's alleged connections to Jeffrey Epstein has died, according to a report by The Banker. The death raises questions about the circumstances and about the claims the whistleblower made regarding Lutnick, now a prominent figure in the Trump administration. Details about the cause of death and the substance of the allegations have not been widely reported, and observers are calling for the claims to be examined.

Splunk has released fixes for 17 vulnerabilities, the most severe being CVE-2026-76268, rated 9.1. The flaw allows unauthenticated remote code execution through the Patroni REST API on search head cluster members, requiring no credentials or user interaction, only network access. Affected versions include 10.4.0–10.4.2 and 10.2.0–10.2.6. Security researchers are urging administrators to patch immediately given the low bar for exploitation.

The Internet's root cryptographic trust keys are scheduled to change on October 11. The change is expected to affect how network operators and service providers handle DNSSEC trust anchors, and technical communities are urging administrators to check their systems are prepared before the date to avoid outages or resolution failures.

A critical vulnerability, CVE-2026-76268, has been disclosed in Splunk Enterprise versions below 10.4.3 and 10.2.7. The flaw, scored 9.8, allows an unauthenticated attacker with network access to the Patroni REST API on a search head cluster member to execute arbitrary code. Security teams are urged to patch affected deployments immediately.

The Pentagon, under Defense Secretary Pete Hegseth, is broadening its campaign against drug cartels by deploying troops on the ground in South America. The move marks an escalation from earlier maritime operations against trafficking networks, raising questions in the region about sovereignty and the scope of US military involvement abroad.

Cisco has issued a security hardening release for its NX-OS networking software following an internal engineering review, addressing a newly disclosed vulnerability tracked as CVE-2026-76455. The flaw carries a critical severity score of 9.8 out of 10, making it one of the most serious ratings possible, and security teams are urged to update affected devices promptly.

Cisco has disclosed CVE-2026-76453, a high-severity vulnerability rated 8.8, following an internal security review of its NX-OS networking software. The company released a software hardening update addressing the flaw and multiple other issues found during the review. Security teams are being urged to review the advisory and apply the patches to affected data center switches promptly.

Cisco has disclosed CVE-2026-76498, a critical vulnerability rated 9.8 out of 10 in its Application Policy Infrastructure Controller. The company says the flaw surfaced during an internal security review by the APIC engineering team. With a maximum severity score, administrators who deploy APIC in data centre environments are expected to move quickly to patch, and security watchers are flagging the advisory widely.

A new social media briefing is circulating among colleagues in local government, administration, culture, politics and education in Germany. It centres on the topic of 'reach' in sovereign social media and compiles seven talks from Berlin's Fediday event, which participants are encouraged to watch and share. The exchange reflects growing interest among public institutions in running their communications on independently operated, decentralised networks.