Tag archive
A missing authorization check in the ScreenConnect client allowed file transfers to execute without host confirmation. Reported activity across multiple organisations showed worm-like behaviour inside managed fleets.
How to triage a batch of confirmed-exploited vulnerabilities, using the September 2026 KEV update as a worked example.
The September 2026 KEV wave as an operations dataset, not a news cycle A single exploited...
Comparing internet-facing exposure across the products named in the 2 September 2026 CISA KEV update.
The CISA KEV catalog should sit at the top of your vulnerability prioritization workflow because it...
CVE-2026-20182 is a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN under active exploitation. CISA added it to KEV with a May 17 deadline. Here's what SD-WAN admins need to do now.
CISA added CVE-2026-6973 to KEV with a May 10 deadline. 850+ Ivanti EPMM instances are exposed online. Here's what defenders need to do now.
The difference between a theoretical vulnerability and an actively exploited one is the difference...
A WebLogic vulnerability patched almost two years ago is now urgent again because CISA says attackers...
CISA has flagged CVE-2026-22719, a critical remote code execution vulnerability in VMware Aria Operations, as actively exploited in the wild. Federal agencies must patch by March 18, 2026.