If you self-host GitLab — Community or Enterprise Edition — this is a stop-and-patch alert. CISA confirmed on October 29 that a maximum-severity flaw in GitLab's CI/CD regular-expression compiler is being actively exploited in the…
Attackers are stripping the one warning Windows gives you when you open a dangerous file. CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities catalog on October 13 after Microsoft confirmed the flaw is already being…
If your organization uses an Ivanti Connect Secure VPN appliance to let remote workers into your network, stop scrolling and check your version right now. On October 13 CISA added CVE-2026-104935 to its Known Exploited…
If you run WordPress — whether it's one blog or a fleet of client sites — stop what you're doing and check your version. A critical flaw in WordPress core, tracked as CVE-2026-87902 (CVSS 9.2),…
If you run Citrix NetScaler ADC or NetScaler Gateway, stop scrolling and check your version. On September 27 CISA added two critical zero-days to its Known Exploited Vulnerabilities (KEV) catalog after confirming attackers are exploiting…
If your organization runs Check Point’s Security Management Server, stop what you are doing and read this. CISA just added CVE-2026-93616 to its Known Exploited Vulnerabilities catalog because attackers are already using it in the…