NewsThe Hacker News
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
More on DDoS
Other advisories
- HighCVE-2026-92698FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, process_sflow_flow_sample() in src/sflow_plugin/sflow_collector.cpp …
- HighCVE-2026-92697FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen() on an attacker-controlled …
- HighCVE-2026-92693FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parse_raw_packet_to_simple_packet_full() in src/simple_packet_parser…
- HighCVE-2026-93424FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peer_find_template() in src/netflow_plugin/netflow_collector.cpp and…
- HighCVE-2026-92695FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parse_packet() callback in src/pcap_plugin/pcap_collector.c…
- MediumCVE-2026-92694FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in draw_table_ipv6(…
- Not ratedosv:CVE-2026-48987pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager
- MediumCVE-2020-14312A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option `local-service` is not enabled. Running dnsmasq in this manner may inadvertently make it an open resolver accessible from any address on the internet. This flaw allows an attacker to conduct a Distributed Denial of Service (DDoS) against other systems.
Other news entries
- Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%NewsThe Hacker News
- Choosing a WAAP in 2026: 3 questions that separate the shortlistNewsCSO Online
- "Icepick" leak exposes records on 41,000 DHS employees, including undercover ICE agentsBreachpwn.watch
- Canonical Websites Disrupted in Second DDoS Attack This YearNewsSecurityWeek
- NightmareStresser DDoS Service Disrupted in International OperationNewsSecurityWeek
- US takes down NightmareStresser DDoS-for-hire platformNewsBleepingComputer
- U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS AttacksNewsThe Hacker News
- Massive DDoS attack disrupts Norway’s government digital servicesNewsBleepingComputer
Source: https://thehackernews.com/2026/11/weekly-recap-critical-cves-linux-ddos.html
ID