Cybersecurity
SonicWall SSL VPN Flaw Can Bypass SAML Logins and MFA: Update Now
SonicWall has fixed seven SonicOS flaws, including one that can let attackers slip past SAML and MFA on SSL VPN logins. CISA says it…
Tag: CISA KEV
Cybersecurity
WordPress Update-Window Flaw Exploited: Patch to 7.1.4 Now
CISA says attackers are exploiting a WordPress core flaw that strikes during the few seconds a site spends updating. Here is what is affected,…
Cybersecurity
Ivanti Connect Secure Zero-Days Exploited: Upgrade VPNs Again Now
Ivanti has patched two more Connect Secure VPN flaws that attackers chained with an earlier bug to steal credentials. October's fix is not enough:…
Cybersecurity
Nextcloud Servers Backdoored via Collabora Flaw: Check Yours Now
Attackers have exploited CVE-2026-110447 in Nextcloud's built-in Collabora CODE app to plant web shells, and CISA has added it to its exploited-vulnerabilities list. Here…
Cybersecurity
Attackers Exploit Firewall, Email Gateway and Backup Server Flaws
CISA has flagged actively exploited flaws in Palo Alto Networks PAN-OS, Cisco Secure Email Gateway and AhsayCBS backup software. Here is who is affected…