Cybersecurity

Monday’s brief: NetScaler zero-days, then SharePoint’s deadline, Zimbra OnlyOffice, and a WSO2 JWT bypass

Monday’s brief: NetScaler zero-days, then SharePoint’s deadline, Zimbra OnlyOffice, and a WSO2 JWT bypass

Exploited NetScaler RCEs after Saturday’s patch, SharePoint KEV due today, Zimbra OnlyOffice public-share RCE, and WSO2 JWT auth bypass....

WSO2’s JWT bypass missed Sunday’s deadline — apply the gateway update today

WSO2’s JWT bypass missed Sunday’s deadline — apply the gateway update today

An unsupported JWT algorithm can become an admin session on WSO2 API Manager and Universal Gateway. KEV due was September…

Zimbra OnlyOffice can turn a public Briefcase link into a shell

Zimbra OnlyOffice can turn a public Briefcase link into a shell

Unauthenticated RCE when OnlyOffice meets a public Briefcase document. Patch to 10.1.21 or turn the feature off....

SharePoint’s federal clock runs out today — confirm the August builds

SharePoint’s federal clock runs out today — confirm the August builds

CISA’s SharePoint KEV is due Monday September 28. Microsoft already confirmed observed attacks — verify the farm builds....

NetScaler zero-days were exploited before the patch — upgrade every ADC and Gateway today

NetScaler zero-days were exploited before the patch — upgrade every ADC and Gateway today

Citrix confirmed two NetScaler RCEs were exploited before Saturday’s fix. One hits every appliance in the default config....

No Featured Image

How Often Should a Business Test Its DDoS Protection?

Test DDoS protection at least once a year, every six months in finance, gaming or telecom, and again after a cloud migration, new CDN or a real attack.

Is GSEC Worth It in 2026? GSEC vs Security+ and Who Pays

Is GSEC Worth It in 2026? GSEC vs Security+ and Who Pays

Is GIAC GSEC worth it in 2026? What the certification costs and who pays, the 106-question CyberLive exam, GSEC vs Security+ and a 10-week study plan.

CISA in 2026: Why the Exam Wants the Auditor’s Answer

CISA in 2026: Why the Exam Wants the Auditor’s Answer

CISA exam cost, format and passing score in 2026: 150 questions in 4 hours, 450 to pass, CPE changes from January 2027 and a 12-week study plan.

SC-200 in 2026: Learn KQL First, Then Book the Exam

SC-200 in 2026: Learn KQL First, Then Book the Exam

Microsoft SC-200 in 2026: 100 minutes, 700 to pass, $165 with free yearly renewal, the October 21 update, why KQL comes first and an 8-week study plan.

AWS Security Specialty in 2026: Why IAM Decides SCS-C03

AWS Security Specialty in 2026: Why IAM Decides SCS-C03

AWS Certified Security – Specialty is now SCS-C03: 65 questions in 170 minutes, 750 to pass, US$300, what moved from SCS-C02 and a 10-week study plan.

Google Cybersecurity Certificate: Can It Get You Hired?

Google Cybersecurity Certificate: Can It Get You Hired?

What the Google Cybersecurity Certificate costs on Coursera, how long it takes, whether it gets you hired on its own, and when to add Security+.

Is CompTIA A+ Worth It in 2026? Cost, Exams, 10-Week Plan

Is CompTIA A+ Worth It in 2026? Cost, Exams, 10-Week Plan

CompTIA A+ in 2026: two exams, 220-1201 and 220-1202, $274 each, who can skip A+ for a security career, where people lose points and a 10-week plan.

How to Pass OSCP: Why Active Directory Decides Your Score

How to Pass OSCP: Why Active Directory Decides Your Score

OSCP+ scoring changes Dec 1, 2026: a scaled 400 on a 100 to 500 scale replaces 70 of 100. What it means for the AD set, plus tool rules and a study plan.