Cyber News

Daily coverage of exploited vulnerabilities, breaches and patches, with what to do first.

Inside the Daily Brief

A real sample of the weekday read

Your internal dashboards were never meant to be public — JPCERT says attackers are finding them anyway

Your internal dashboards were never meant to be public — JPCERT says attackers are finding them anyway

BI tools and employee-only admin systems are behind a wave of data leaks. The fix starts with a list of…
Friday’s brief: forgotten servers on a seven-country advisory, then Splunk, Bricksforge and exposed dashboards

Friday’s brief: forgotten servers on a seven-country advisory, then Splunk, Bricksforge and exposed dashboards

One seven-country advisory about the servers you forgot, plus three fixes to finish before the weekend....
Patch Jira and Confluence today: attackers are now testing the Atlassian bug we flagged yesterday

Patch Jira and Confluence today: attackers are now testing the Atlassian bug we flagged yesterday

A public exploit dropped Tuesday and honeypots lit up two hours later. If Jira talks to Crowd, the endgame is…

The CyberExperts Daily Brief

Keep up with the cyber news that changes the day

Get the weekday brief for people scanning the news: the developments worth a closer look, explained in about five minutes.

Thursday’s brief: FortiGate lockouts, then Nexus switches, hijacked AI servers, Atlassian exploits

Thursday’s brief: FortiGate lockouts, then Nexus switches, hijacked AI servers, Atlassian exploits

Stolen FortiGate logins are turning into lockouts and ransomware. The Atlassian bug from yesterday’s brief now has attackers....
FortiBleed is still locking admins out of their own FortiGates — reset logins and lock down management today

FortiBleed is still locking admins out of their own FortiGates — reset logins and lock down management today

More than 86,000 FortiGates already taken with real passwords, and ransomware crews are buying the access. A firmware update won’t…
Before you book the Nexus upgrade, check which of Cisco’s four critical NX-OS advisories actually apply to your switches

Before you book the Nexus upgrade, check which of Cisco’s four critical NX-OS advisories actually apply to your switches

One batch hits every Nexus config. Three more only matter if NX-API, NGOAM or MPLS OAM is on. Nothing’s exploited…
That LiteLLM box someone spun up for a pilot may be mining crypto for a stranger

That LiteLLM box someone spun up for a pilot may be mining crypto for a stranger

A botnet steered by a poem has taken over more than 3,400 exposed AI and dev servers. Find yours before…
Your Confluence and Jira boxes can leak known files without a login — patch Data Center today

Your Confluence and Jira boxes can leak known files without a login — patch Data Center today

Eight Atlassian Data Center products. No login required. Cloud is already fixed — your servers are not....
If your Java app still uses Struts’ old REST mapper, upgrade before someone tests it

If your Java app still uses Struts’ old REST mapper, upgrade before someone tests it

Legacy RESTful action mapper still on? That configuration turns this OGNL bug into remote code execution....
The PHP template engine under your storefront needs a quiet update

The PHP template engine under your storefront needs a quiet update

Smarty’s cache marker can forge executable PHP. Most teams did not pick Smarty — check the lockfile anyway....
Osaka’s university lost hundreds of servers to ransomware — classes stay cancelled through Thursday

Osaka’s university lost hundreds of servers to ransomware — classes stay cancelled through Thursday

About 500 servers down. Possible exposure for ~130,000 people. Prove your offline restore this week....
Wednesday’s brief: Atlassian Data Center, then Struts, Smarty’s cache, Osaka’s outage

Wednesday’s brief: Atlassian Data Center, then Struts, Smarty’s cache, Osaka’s outage

Wednesday’s CyberExperts Daily Brief — Atlassian Data Center file access, Struts OGNL, Smarty cache injection, Osaka ransomware, plus NetScaler KEV…
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day

Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day

CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes…