Cybersecurity

Attackers got root on fully patched Ivanti VPNs. Upgrade Connect Secure today and check Active Directory

Attackers got root on fully patched Ivanti VPNs. Upgrade Connect Secure today and check Active Directory

The attackers went after LAPS passwords and BitLocker keys, and Ivanti’s own integrity checker missed them....
Two SAP fixes this month let an ordinary user take over the system. Book S/4HANA and Visual Composer patches this week

Two SAP fixes this month let an ordinary user take over the system. Book S/4HANA and Visual Composer patches this week

Four critical notes in SAP’s October patch day. None is exploited, and two of them rate 9.9....
Your FortiSIEM and FortiSandbox boxes have no-login bugs. Upgrade them before attackers go looking

Your FortiSIEM and FortiSandbox boxes have no-login bugs. Upgrade them before attackers go looking

The tools that watch your network can be taken over without an account. Fortinet says neither bug is exploited yet....
Wednesday’s brief: a Windows bug already under attack, then Ivanti VPNs, SAP and Fortinet

Wednesday’s brief: a Windows bug already under attack, then Ivanti VPNs, SAP and Fortinet

One update to push today, one VPN to upgrade and check, and two patch lists for this week....
CEH vs PenTest+ vs OSCP (2026): Which Pen Testing Cert Is Right?

CEH vs PenTest+ vs OSCP (2026): Which Pen Testing Cert Is Right?

CEH vs PenTest+ vs OSCP in 2026: exam formats, difficulty, current prices and 3-year costs, renewal, DoD 8140 status and which pen testing cert fits you.
Self-managed GitLab servers need yesterday’s critical patch. Upgrade before someone runs code on yours

Self-managed GitLab servers need yesterday’s critical patch. Upgrade before someone runs code on yours

A bug rated 10 out of 10 lets someone with no account run code on the server through a crafted…
Microsoft’s October updates land this afternoon. Get your test machines ready this morning

Microsoft’s October updates land this afternoon. Get your test machines ready this morning

The details won’t be public until about 1 PM ET. Here is what is already known and how to plan…
Attackers defrosted supermarket fridges across France. Check who can reach your refrigeration controllers

Attackers defrosted supermarket fridges across France. Check who can reach your refrigeration controllers

Hundreds of stores lost chilled stock after Danfoss controllers were hijacked overnight. Thousands more are online....
Windows Server 2012 gets its last update today, and Exchange 2016 and 2019 follow on October 31

Windows Server 2012 gets its last update today, and Exchange 2016 and 2019 follow on October 31

After today’s release, new Server 2012 bugs stay open. Find those boxes and give each one an owner and a…
Tuesday’s brief: GitLab’s critical fix, then Patch Tuesday, hijacked fridge controllers and Server 2012’s last update

Tuesday’s brief: GitLab’s critical fix, then Patch Tuesday, hijacked fridge controllers and Server 2012’s last update

One fix to install this morning, one release to prepare for this afternoon, and two lists to make....
Best Cybersecurity Certifications With No Experience (2026)

Best Cybersecurity Certifications With No Experience (2026)

The best cybersecurity certifications with no experience in 2026: ISC2 CC, Google certificate, Security+, A+, Network+ and cloud basics, with current prices.
Monday’s brief: GlobalProtect logins without passwords, then SonicWall, AhsayCBS and NetScaler

Monday’s brief: GlobalProtect logins without passwords, then SonicWall, AhsayCBS and NetScaler

Four remote-access and backup fixes that piled up over the weekend, in the order we would do them....
Patched NetScaler last week? Check again, because Citrix has a new SAML fix

Patched NetScaler last week? Check again, because Citrix has a new SAML fix

Some September builds are still affected when NetScaler does SAML sign-in. The new floor is 14.1-73.46 or 13.1-64.29....