If you self-host Nextcloud and installed the optional Collabora Online – Built-in CODE Server app, stop reading and check your server right now. Attackers have been breaking into Nextcloud instances through that app since mid-September,…
If your organization runs a self-hosted BeyondTrust Remote Support appliance (formerly Bomgar), treat it as compromised until you prove otherwise. A China-nexus espionage group has been exploiting a critical zero-day in the platform since late…
Attackers are stripping the one warning Windows gives you when you open a dangerous file. CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities catalog on October 13 after Microsoft confirmed the flaw is already being…
If your organization uses an Ivanti Connect Secure VPN appliance to let remote workers into your network, stop scrolling and check your version right now. On October 13 CISA added CVE-2026-104935 to its Known Exploited…
If your organization runs Cisco Catalyst SD-WAN Manager — the console that pushes policy and config to every edge router across your wide-area network — stop what you're doing and check your version. Cisco has…
If you run WordPress — whether it's one blog or a fleet of client sites — stop what you're doing and check your version. A critical flaw in WordPress core, tracked as CVE-2026-87902 (CVSS 9.2),…
If you run Citrix NetScaler ADC or NetScaler Gateway, stop scrolling and check your version. On September 27 CISA added two critical zero-days to its Known Exploited Vulnerabilities (KEV) catalog after confirming attackers are exploiting…
If your organization runs Check Point’s Security Management Server, stop what you are doing and read this. CISA just added CVE-2026-93616 to its Known Exploited Vulnerabilities catalog because attackers are already using it in the…