Clone Systems
Share
Clone Systems has been securing businesses since 1998 and delivering PCI compliance as an ASV for 18 years.
We’re here to make security and compliance simple for your team.
09/25/2026
CISA added CVE-2026-71362 to its KEV catalog: CVSS 9.1, unauthenticated privilege escalation in Adobe Commerce and Magento. Patch by September 27. Full advisory: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
09/25/2026
An anonymous scan only sees your marketing pages and the login screen. The bugs that hurt, IDOR and privilege escalation, live behind it. Credentialed scanning signs in to find them. Full details: https://www.clone-systems.com/credentialed-scanning/
09/24/2026
Check Point CVE-2026-85102: pre-auth RCE (CVSS 9.8) in Gateway VPN cert handling. Actively exploited; CISA KEV since Sept 22. Fix out since Sept 9. Patch now. Details: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
09/23/2026
A missed quarterly PCI ASV scan leaves a gap in your attestation file that can't be cured retroactively. PCI DSS 11.3.2 needs a passing scan each calendar quarter. Full details: https://www.clone-systems.com/pci-asv-scan-external-vulnerability-scanning/
09/23/2026
Your logs expire before your breach ends. IdP, SaaS, and cloud control plane logs vanish at the source in 1-180 days unless forwarded. A managed SOC pulls them in so evidence survives. Full details: https://www.clone-systems.com/managed-soc-service/
09/23/2026
CISA added a SQL injection flaw in Cisco Secure Email Gateway (CVE-2026-76461) to its KEV catalog based on evidence of active exploitation. If you run this appliance, patch now and check for prior compromise.
09/16/2026
Yesterday, Clone Systems Inc officially announced the next generation of our vulnerability management platform, including 4x the vulnerability detection, deeper authenticated testing, and private AI built to help teams prioritize what to fix first.
But those are only the headlines.
We rebuilt far more than the scanner.
PR Newswire has the full story:
https://www.prnewswire.com/news-releases/clone-systems-rebuilds-cloneguard-with-4x-the-vulnerability-detection-private-ai-remediation-and-authenticated-testing-you-can-buy-online-302879703.html
Clone Systems Rebuilds CloneGuard With 4x the Vulnerability Detection, Private AI Remediation, and Authenticated Testing You Can Buy Online /PRNewswire/ -- Clone Systems, Inc. today launched a rebuilt version of CloneGuard, its vulnerability scanning and pe*******on testing platform. The new...
What you trust is still here. Everything around it just evolved.
For 20+ years, businesses have relied on the Clone Systems Inc portal to stay PCI compliant and secure. It has never stood still. Every major step forward came from listening to our customers and keeping pace with the threat landscape, and today is the biggest step yet.
The new Clone Systems website and portal bring the full platform into one place:
PCI ASV scanning Vulnerability scanning Agent-based scanning Web application scanning Automated pe*******on testing Dark web probing AI-powered remediation and triage
One login. One clear view of your risk. Findings explained in plain language, with what to fix first.
Current customers: your account, your scan history, and your reports are all right where you left them.
Not a customer yet? This is a very good day to start the conversation. www.clone-systems.com
Vulnerability Alert: Cisco Patches Multiple Critical Flaws
Cisco has released security updates addressing nine vulnerabilities affecting Cisco Crosswork platforms and Cisco Secure Workload, including four vulnerabilities with a maximum CVSS score of 10.0.
The critical flaws include SQL injection, missing authentication, improper access controls, authentication bypasses, and external control of file system vulnerabilities. Successful exploitation could expose affected enterprise environments to serious security risks.
Affected products include:
• Cisco Crosswork Data Gateway
• Cisco Crosswork Network Controller
• Cisco Crosswork Planning
• Cisco Secure Workload
Cisco has released fixes in:
• Crosswork 7.2.1-SP
• Secure Workload 3.10.9.1
• Secure Workload 4.0.4.16
Cisco states that these vulnerabilities were discovered during internal testing and are not currently known to be actively exploited.
Organizations using affected Cisco products should review their deployed versions and prioritize the appropriate security updates.
Oracle has released 943 security patches in its August 2026 Critical Patch Update, addressing vulnerabilities across Oracle Database, Fusion Middleware, E Business Suite, Java SE, MySQL, Enterprise Manager, PeopleSoft, Communications products, and other enterprise platforms.
The most urgent risks include multiple critical Oracle WebLogic Server vulnerabilities that could allow unauthenticated remote attackers to take control of affected servers. Several flaws impact WebLogic Server Core through T3, IIOP, and RMI protocols, with severity scores as high as 9.9.
For organizations running Oracle environments, this is not a routine patch cycle to casually place in the backlog. WebLogic, Fusion Middleware, and other business critical systems often support sensitive applications, internal workflows, customer data, and operational processes.
Security teams should identify affected Oracle products, prioritize internet facing WebLogic servers, test and deploy the applicable patches quickly, and restrict exposed protocols where immediate patching is not possible.
When a single patch update contains hundreds of fixes and multiple critical takeover risks, prioritization matters. Start with the systems attackers can reach first.
Click here to claim your Sponsored Listing.