If you self-host GitLab — Community or Enterprise Edition — this is a stop-and-patch alert. CISA confirmed on October 29 that a maximum-severity flaw in GitLab's CI/CD regular-expression compiler is being actively exploited in the…
If you self-host Nextcloud and installed the optional Collabora Online – Built-in CODE Server app, stop reading and check your server right now. Attackers have been breaking into Nextcloud instances through that app since mid-September,…
If you run PHP on any server that touches the internet, this is a stop-and-patch alert. On October 21, PHP shipped emergency releases to fix two critical, memory-safety flaws - CVE-2026-109618 and CVE-2026-109619, together nicknamed…
If you run AhsayCBS - the management console used by managed service providers and system integrators to run Ahsay's backup software - this is a stop-and-check-your-version alert. Two chained flaws are being exploited in the…
Attackers are stripping the one warning Windows gives you when you open a dangerous file. CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities catalog on October 13 after Microsoft confirmed the flaw is already being…
If your organization uses an Ivanti Connect Secure VPN appliance to let remote workers into your network, stop scrolling and check your version right now. On October 13 CISA added CVE-2026-104935 to its Known Exploited…
If your phone is an iPhone 11 or newer, or you run a Mac, this one lands on you directly. Apple pushed emergency updates on September 28 to fix a CoreGraphics zero-day — CVE-2026-86950 —…
If you run Zammad — the open-source helpdesk and ticketing platform — as your customer support inbox, stop reading and check your version. CISA just added two actively exploited flaws to its Known Exploited Vulnerabilities…
If your organization runs Fortinet FortiMail as its email security gateway, stop what you are doing and check your build. CISA added CVE-2026-104286 to its Known Exploited Vulnerabilities catalog on October 1 after threat actors…
If your organization runs Cisco Catalyst SD-WAN Manager — the console that pushes policy and config to every edge router across your wide-area network — stop what you're doing and check your version. Cisco has…