If you run Zammad — the open-source helpdesk and ticketing platform — as your customer support inbox, stop reading and check your version. CISA just added two actively exploited flaws to its Known Exploited Vulnerabilities…
If your network runs on Cisco Identity Services Engine (ISE) as its access control brain, stop scrolling. Cisco has confirmed a maximum-severity, actively exploited authentication bypass in that exact product — CVE-2026-76460, CVSS 10.0 —…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) just dropped five new vulnerabilities into its Known Exploited Vulnerabilities (KEV) catalog, and if you are running any of the affected software — JFrog Artifactory, ConnectWise ScreenConnect,…
If your organization runs a self-hosted GitLab instance, stop what you are doing and check your version. A maximum-severity path traversal vulnerability, CVE-2026-85706 (CVSS 10.0), is being actively exploited in the wild, and the window…
If you manage Cisco Secure Firewalls through a Firewall Management Center (FMC) appliance, stop what you're doing and check your patch status. A maximum-severity authentication bypass — CVE-2026-20079, CVSS 10.0 — is being actively exploited…
Google shipped an emergency Chrome update on September 4, 2026, to close a zero-day vulnerability that attackers are already using against real targets. If you use Chrome — and roughly 69% of the web does…
CISA Adds Critical Gitea RCE (CVE-2026-60004) to KEV Catalog as Active Attacks Drop Cryptominers CISA has added CVE-2026-60004 to its Known Exploited Vulnerabilities catalog. This is a CVSS 9.8 remote code execution flaw in Gitea,…