THE JDNEER

Four Critical J-Web Flaws Let Attackers Take Over Junos Devices Without Logging In

Four Critical J-Web Flaws Let Attackers Take Over Junos Devices Without Logging In

Juniper's October release fixes four CVSS 9.8 flaws in J-Web, the Junos web interface, that let unauthenticated attackers bypass login or run code as root. There are no workarounds, so patching and locking J-Web down to trusted hosts is the answer.

Five Critical BGP Bugs Let Peers Take Over Juniper Routers

Five Critical BGP Bugs Let Peers Take Over Juniper Routers

Five CVSS 9.8 stack overflows in Juniper's routing daemon can be triggered through BGP, via BMP, flowspec and EVPN-VPWS, and most lead to root code execution on Junos OS. None are known exploited. Fixed releases are out, and only one has a workaround.

Juniper's October 2026 Security Release: 153 Junos CVEs, 15 Critical, and What to Patch First

Juniper's October 2026 Security Release: 153 Junos CVEs, 15 Critical, and What to Patch First

Juniper's October 14 release fixes 153 Junos OS and Junos OS Evolved CVEs, 15 of them critical, spanning BGP, J-Web, SRX, MX and more. None are on CISA's KEV list and Juniper knows of no exploitation, but most lack workarounds, so upgrading is the fix.

This Open Source Project Turns a Wi-Fi 7 Router Into a 320 MHz Radio Receiver

This Open Source Project Turns a Wi-Fi 7 Router Into a 320 MHz Radio Receiver

W1700K SDR turns a Gemtek Wi-Fi 7 router into a receive-only software-defined radio that streams up to 320 MHz of raw IQ from the 2.4, 5 and 6 GHz bands over 10 gigabit Ethernet, using only open firmware. Here is what it does and what it takes to run.

We Tested ScamCheck.ph, the Banks' New Anti-Scam Checker. Here's How It Did

We Tested ScamCheck.ph, the Banks' New Anti-Scam Checker. Here's How It Did

Philippine banks are pushing ScamCheck.ph, a free AI checker for suspicious texts and screenshots. In our small test it flagged all six fake scam messages and none of three genuine ones. The one gap worth fixing: it doesn't yet say who handles your data.

Chip Stocks Tumble Across Asia as Rate Fears and AI Funding Worries Collide

Chip Stocks Tumble Across Asia as Rate Fears and AI Funding Worries Collide

Kospi fell over 8% and hit a trading halt as Samsung and SK hynix lost more than 10%, after hot US inflation revived Fed hike fears and CoreWeave's bond slide deepened doubts about how the AI buildout is financed. Tokyo and Taipei fell too.

Globe Wants Telecom Restoration Treated Like Power After Disasters

Globe Wants Telecom Restoration Treated Like Power After Disasters

Globe is proposing a National Utility Resiliency Plan that would put telecom restoration on par with power after disasters, with priority logistics, security support and faster permits for repair crews, plus incentives for sturdier networks.

Ledger Freezes Wallet Sales Across Southeast Asia and Hong Kong Over Spy Implants

Ledger Freezes Wallet Sales Across Southeast Asia and Hong Kong Over Spy Implants

Ledger has asked resellers in the Philippines, six other Southeast Asian markets and Hong Kong to pull its hardware wallets from shelves while it investigates devices fitted with a hidden implant that steals recovery phrases. Suspected losses top US$86 million.

NOW Telecom Contests ₱4.04 Billion NTC Fee Bill, Asks for Recomputation Back to 2005

NOW Telecom Contests ₱4.04 Billion NTC Fee Bill, Asks for Recomputation Back to 2005

NOW Telecom is disputing a ₱4.04 billion NTC bill for unpaid supervision and regulation fees and penalties, saying the regulator used the wrong capital figures. It wants every assessment since 2005 recomputed and collection paused meanwhile.

Meta's Muse Builds Dossiers on Users and Their Friends, Investigations Find

Meta's Muse Builds Dossiers on Users and Their Friends, Investigations Find

Meta's Muse AI agent tops the App Store, but TIME, Hunterbrook, EPIC and Fast Company report hourly relationship dossiers, profiles of non-users, training on chats by default, and real mishaps. Here is what is confirmed and what Meta says.

Juniper Patches Four Critical Junos Flaws, Including Root Takeover on MX Routers

Juniper Patches Four Critical Junos Flaws, Including Root Takeover on MX Routers

Juniper has patched four CVSS 9.8 Junos flaws that need no login: a root code execution bug in MX routers' certificate-based IKE handling and three J-Web takeover bugs. None are known to be exploited yet, but there are no workarounds, so upgrading is the fix.

GitLab Patches CVSS 10.0 Flaw That Lets Attackers Run Code Without Logging In

GitLab Patches CVSS 10.0 Flaw That Lets Attackers Run Code Without Logging In

GitLab patched CVE-2026-97229, a CVSS 10.0 flaw that could let an unauthenticated user run code on self-managed GitLab servers through a crafted regex in CI/CD config. Fixed in 19.4.2, 19.3.5, and 19.2.8. Upgrade now.