Follow the cybersecurity developments that matter, explained in about five minutes each weekday.
The Atlassian bug we flagged on October 7 is now confirmed exploited. Data Center servers need a fixed build or…
Two of the bugs let someone take over a device through J-Web with no login. Nobody is exploiting them yet....
Adobe rates the worst bug 10.0. No attacks yet, and September’s separate hotfix still matters....
A researcher leaked host memory from Vercel’s live sandboxes and reached a full host escape in a lab....
One Atlassian deadline this weekend, a Junos upgrade plan, a store patch and a host kernel update....
Palo Alto has seen limited attacks and published three IP addresses to look for....
Turning the Collabora Built-in CODE Server app off does not help. It has to be updated or removed....
Version 9 servers finally have a fix, and Ahsay has published what a compromised server looks like....
One mail gateway to check today, a firewall upgrade, a Nextcloud app to update and a backup hotfix to confirm....
The box that scans your mail for malware can be rooted by an email. Cisco says it is already happening....
A booby-trapped file can skip the “downloaded from the internet” warning. CISA wants it patched by Friday....
The attackers went after LAPS passwords and BitLocker keys, and Ivanti’s own integrity checker missed them....
Four critical notes in SAP’s October patch day. None is exploited, and two of them rate 9.9....
