Follow the cybersecurity developments that matter, explained in about five minutes each weekday.
A researcher leaked host memory from Vercel’s live sandboxes and reached a full host escape in a lab....
Adobe rates the worst bug 10.0. No attacks yet, and September’s separate hotfix still matters....
Two of the bugs let someone take over a device through J-Web with no login. Nobody is exploiting them yet....
The Atlassian bug we flagged on October 7 is now confirmed exploited. Data Center servers need a fixed build or…
One mail gateway to check today, a firewall upgrade, a Nextcloud app to update and a backup hotfix to confirm....
Version 9 servers finally have a fix, and Ahsay has published what a compromised server looks like....
Turning the Collabora Built-in CODE Server app off does not help. It has to be updated or removed....
Palo Alto has seen limited attacks and published three IP addresses to look for....
The box that scans your mail for malware can be rooted by an email. Cisco says it is already happening....
One update to push today, one VPN to upgrade and check, and two patch lists for this week....
The tools that watch your network can be taken over without an account. Fortinet says neither bug is exploited yet....
Four critical notes in SAP’s October patch day. None is exploited, and two of them rate 9.9....
The attackers went after LAPS passwords and BitLocker keys, and Ivanti’s own integrity checker missed them....
