If you self-host Nextcloud and installed the optional Collabora Online – Built-in CODE Server app, stop reading and check your server right now. Attackers have been breaking into Nextcloud instances through that app since mid-September,…
If your organization runs a self-hosted BeyondTrust Remote Support appliance (formerly Bomgar), treat it as compromised until you prove otherwise. A China-nexus espionage group has been exploiting a critical zero-day in the platform since late…
If your network runs on Cisco Identity Services Engine (ISE) as its access control brain, stop scrolling. Cisco has confirmed a maximum-severity, actively exploited authentication bypass in that exact product — CVE-2026-76460, CVSS 10.0 —…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) just dropped five new vulnerabilities into its Known Exploited Vulnerabilities (KEV) catalog, and if you are running any of the affected software — JFrog Artifactory, ConnectWise ScreenConnect,…
If your organization runs a self-hosted GitLab instance, stop what you are doing and check your version. A maximum-severity path traversal vulnerability, CVE-2026-85706 (CVSS 10.0), is being actively exploited in the wild, and the window…
If you run a WordPress site with Elementor Pro, stop what you are doing and check your plugin version. A critical unauthenticated remote code execution vulnerability — tracked as CVE-2026-32475 with a CVSS score of…
If you run PaperCut print management software, stop what you are doing and read this. PaperCut has confirmed that an unpatched vulnerability in all versions of PaperCut NG and PaperCut MF is being actively exploited…