Atlassian Patches: Exploited Jira and Confluence Flaw and 75 More
An actively exploited file-reading flaw and a 75-CVE October bulletin mean self-managed Jira, Confluence and Bitbucket servers need urgent updates.
An actively exploited file-reading flaw and a 75-CVE October bulletin mean self-managed Jira, Confluence and Bitbucket servers need urgent updates.
Oracle has released an out-of-band alert for CVE-2026-91403, a 9.1-rated Java flaw that could let attackers forge trusted HTTPS certificates. Here's who is affected…
Attackers are exploiting the Plex2Shell flaws to plant crypto miners on unpatched Plex servers. This step-by-step guide shows how to update, check and harden…
Node.js has fixed CVE-2026-111497, a critical Brotli decoder flaw nicknamed Node2Shell. Here is who is exposed, which versions are safe and what to do…
GitLab has patched a maximum-severity remote code execution flaw, CVE-2026-110264, plus 11 other bugs. GitLab.com is already fixed, but self-managed servers need upgrading now.
Fortinet has released patches for critical and high-severity flaws in FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator, with full advisories due on 10 November. Here…
F5 has released out-of-band fixes for three critical NGINX vulnerabilities that can crash servers and, in some setups, allow remote code execution. Here is…
PHP is releasing fixes for two critical remote code execution flaws on 21 October 2026 after details leaked early. Here is who is affected…
Oracle's October 2026 Critical Patch Update fixes 1,209 CVEs across 33 product families, including several rated 10.0. Here is how to prioritise.
Google has shipped three Chrome security updates in October 2026, fixing dozens of serious flaws, several reported with help from AI. Here is what…
Saved on this device only.
Get new articles and urgent scam warnings in your inbox, before the scammers reach you.