Insights that apply internationally, including most vulnerabilities, threats, and international standards.
Cisco Secure Email Gateway flaw CVE-2026-76519 is under active attack: update Content Scanner Tools or AsyncOS now and check your appliances for compromise.
ISO and IEC have published ISO/IEC 27090:2026, guidance on understanding, detecting, and mitigating security threats specific to AI systems, designed to sit alongside ISO/IEC 27001 and 27002.
Ivanti Connect Secure CVE-2026-104935 is under active attack: upgrade to 22.8R2.5, 25.1.1.2, or 25.1.3.0 or later now and check appliances for compromise.
Attackers exploit new flaws in Atlassian Data Center and AhsayCBS backup servers, CISA adds five older flaws linked to Integrity Tech, the FBI warns FortiBleed attacks on FortiGate firewalls continue, and a GitHub Actions campaign steals cloud and AI keys.
The NCSC and international partners call out China-based Integrity Tech for enabling attacks worldwide, as the FBI seizes domains behind its scanning and phishing tools.
Atlassian Data Center flaw CVE-2026-21589 (Jira, Confluence, Bitbucket, and more) is being exploited: upgrade self-hosted instances now or restrict internet access.
Citrix patches another exploited NetScaler flaw, FortiMail and Zammad zero-days are in KEV, and Star Blizzard and Warlock ransomware campaigns hit UK and European targets.
Fortinet FortiMail flaw CVE-2026-104286 (CVSS 9.8) is being actively exploited: upgrade now, or disable IBE and restrict management access, then check for compromise.
A free threat and vulnerability feed on our website, a weekly round-up every Monday, and the easiest way to get it all: our weekly insights email, with optional urgent alerts.
Cisco Catalyst SD-WAN Manager flaw CVE-2026-76504 (CVSS 9.8) is under active attack: upgrade to a fixed release now, check logs for compromise, and restrict management access.
The PCI Security Standards Council has published a new Key Management and Operations Standard, Secure Software Lifecycle Standard v2.0, and guidance on AI systems.
Citrix NetScaler and Check Point VPN flaws under active attack, a WordPress core fix, a SharePoint exploit, and an Apple zero-day.