Follow the cybersecurity developments that matter, explained in about five minutes each weekday.
CVSS 10 pre-auth RCE on on-prem N-central, exploited before disclosure. Patch Hotfix 4, then hunt stranger admins — especially .invalid…
CISA confirmed ransomware gangs are exploiting the critical vCenter Syslog RCE patched in July. Patch fixed trains and hunt the…
CVSS 10 Magento template RCE exploited before the hotfix and still mass-scanned. Apply VULN-39341, hunt backdoors, rotate keys....
Unauthenticated CAPWAP overflow abused to deploy PivotC2 on FortiGate. Upgrade FortiOS and rotate harvested secrets....
CVSS 10 FMC authentication bypass confirmed exploited by nation-state and ransomware clusters. Hotfix now; TAC if IoCs hit....
Wednesday brief: vCenter ransomware, Magento StyleSmuggler, FortiGate PivotC2, and Cisco FMC root bypass....
Cisco email gateway root RCE due Wednesday, Sogou one-click to GRAYRABBIT, Windows ALPC SYSTEM zero-day, and F5 PoisonedRefresh fileless webshell....
PoisonedRefresh injects a PHP webshell into BIG-IP APM memory after CVE-2025-53521. Patching alone does not remove the implant....
CVE-2026-85880 is an exploited Windows ALPC heap overflow to SYSTEM — separate from Update Stack CVE-2026-81963. KEV due September 22....
Gen Digital observed UNC3569 exploiting CVE-2026-51990 in Sogou Input Method to deploy GRAYRABBIT. Fix ≥ 16.3.0.3498....
CVE-2026-76461: unauthenticated SQL injection in Cisco AsyncOS email parsing escalates to root. CISA KEV due September 17, 2026. Fixed AsyncOS…
Self-hosted GitLab: one unauthenticated commits-API request can read secrets on disk. Federal due date is today....
A ScreenConnect client bug can transfer and run files on the host without confirmation. Due today....
