Daily Brief

Attackers are taking over Cisco email gateways with one booby-trapped attachment. Check your scanner version today

Attackers are taking over Cisco email gateways with one booby-trapped attachment. Check your scanner version today

The box that scans your mail for malware can be rooted by an email. Cisco says it is already happening....

A Palo Alto firewall login is enough to own the firewall. Upgrade PAN-OS and lock down the admin page

A Palo Alto firewall login is enough to own the firewall. Upgrade PAN-OS and lock down the admin page

Palo Alto has seen limited attacks and published three IP addresses to look for....

Nextcloud servers have been quietly backdoored through an office app since September. Update it or remove it

Nextcloud servers have been quietly backdoored through an office app since September. Update it or remove it

Turning the Collabora Built-in CODE Server app off does not help. It has to be updated or removed....

The AhsayCBS backup bugs are now on CISA’s exploited list. Ask your MSP which hotfix they run

The AhsayCBS backup bugs are now on CISA’s exploited list. Ask your MSP which hotfix they run

Version 9 servers finally have a fix, and Ahsay has published what a compromised server looks like....

Thursday’s brief: Cisco email gateways under attack, then PAN-OS, Nextcloud and AhsayCBS

Thursday’s brief: Cisco email gateways under attack, then PAN-OS, Nextcloud and AhsayCBS

One mail gateway to check today, a firewall upgrade, a Nextcloud app to update and a backup hotfix to confirm....

Attackers got root on fully patched Ivanti VPNs. Upgrade Connect Secure today and check Active Directory

Attackers got root on fully patched Ivanti VPNs. Upgrade Connect Secure today and check Active Directory

The attackers went after LAPS passwords and BitLocker keys, and Ivanti’s own integrity checker missed them....

Two SAP fixes this month let an ordinary user take over the system. Book S/4HANA and Visual Composer patches this week

Two SAP fixes this month let an ordinary user take over the system. Book S/4HANA and Visual Composer patches this week

Four critical notes in SAP’s October patch day. None is exploited, and two of them rate 9.9....

Your FortiSIEM and FortiSandbox boxes have no-login bugs. Upgrade them before attackers go looking

Your FortiSIEM and FortiSandbox boxes have no-login bugs. Upgrade them before attackers go looking

The tools that watch your network can be taken over without an account. Fortinet says neither bug is exploited yet....

Wednesday’s brief: a Windows bug already under attack, then Ivanti VPNs, SAP and Fortinet

Wednesday’s brief: a Windows bug already under attack, then Ivanti VPNs, SAP and Fortinet

One update to push today, one VPN to upgrade and check, and two patch lists for this week....

Attackers are already using a Windows bug Microsoft fixed on Tuesday. Get the October update onto laptops first

Attackers are already using a Windows bug Microsoft fixed on Tuesday. Get the October update onto laptops first

A booby-trapped file can skip the “downloaded from the internet” warning. CISA wants it patched by Friday....

Self-managed GitLab servers need yesterday’s critical patch. Upgrade before someone runs code on yours

Self-managed GitLab servers need yesterday’s critical patch. Upgrade before someone runs code on yours

A bug rated 10 out of 10 lets someone with no account run code on the server through a crafted…

Microsoft’s October updates land this afternoon. Get your test machines ready this morning

Microsoft’s October updates land this afternoon. Get your test machines ready this morning

The details won’t be public until about 1 PM ET. Here is what is already known and how to plan…

Attackers defrosted supermarket fridges across France. Check who can reach your refrigeration controllers

Attackers defrosted supermarket fridges across France. Check who can reach your refrigeration controllers

Hundreds of stores lost chilled stock after Danfoss controllers were hijacked overnight. Thousands more are online....