56 posts with this tag

#Incident Response

56 posts

Check Point CVE-2026-16232 puts firewall management in the blast radius

Check Point CVE-2026-16232 puts firewall management in the blast radius Check Point has patched an actively exploited SmartConsole authentication bypass that ca...

Last updated on 25/07/2026 at 8:08 AM

6 min read

Lucas Oliveira

Research

Windmill CVE-2026-29059 turns log access into a secrets problem

vulnerability

CVE

Windmill CVE-2026-29059 turns log access into a secrets problem

Windmill CVE-2026-29059 turns log access into a secrets problem Attackers are now exploiting CVE-2026-29059, a Windmill path traversal flaw that lets unauthenti...

Last updated on 17/08/2026 at 12:56 PM

7 min read

Lucas Oliveira

Research

SharePoint CVE-2026-50522 makes patching only the first step

vulnerability

CVE

SharePoint CVE-2026-50522 makes patching only the first step

SharePoint CVE-2026-50522 makes patching only the first step Microsoft SharePoint Server is back in the emergency lane. CVE-2026-50522, a critical deserializati...

Last updated on 17/08/2026 at 12:56 PM

7 min read

Lucas Oliveira

Research

ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets

vulnerability

CVE

ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets

ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets ServiceNow's July security advisory for CVE-2026-6875 has moved quickly from "cri...

Last updated on 17/08/2026 at 12:56 PM

8 min read

Lucas Oliveira

Research

SharePoint RCE zero-day forces a July 19 incident-response deadline

vulnerability

CVE

SharePoint RCE zero-day forces a July 19 incident-response deadline

SharePoint RCE zero-day forces a July 19 incident-response deadline Microsoft SharePoint Server administrators have another urgent on-premises exposure to handl...

Last updated on 17/08/2026 at 12:56 PM

7 min read

Lucas Oliveira

Research

Oracle E-Business Suite flaw hits CISA KEV as payment systems face takeover risk

vulnerability

CVE

Oracle E-Business Suite flaw hits CISA KEV as payment systems face takeover risk

Oracle E-Business Suite flaw hits CISA KEV as payment systems face takeover risk CISA has added CVE-2026-46817, a critical Oracle E-Business Suite vulnerability...

Last updated on 17/08/2026 at 12:56 PM

8 min read

Lucas Oliveira

Research

FortiSandbox command injection flaws move from patch queue to exploited risk

vulnerability

CVE

FortiSandbox command injection flaws move from patch queue to exploited risk

FortiSandbox command injection flaws move from patch queue to exploited risk CISA has added two Fortinet FortiSandbox vulnerabilities to its Known Exploited Vul...

Last updated on 17/08/2026 at 12:56 PM

7 min read

Lucas Oliveira

Research

Firefox and Chrome fixes turn browser patching into this week's urgent control

vulnerability

CVE

Firefox and Chrome fixes turn browser patching into this week's urgent control

Firefox and Chrome fixes turn browser patching into this week's urgent control Mozilla and Google both shipped important browser security updates this week, and...

Last updated on 17/08/2026 at 12:56 PM

8 min read

Lucas Oliveira

Research

Exploited SonicWall SMA zero-days put remote access gateways on the clock

vulnerability

CVE

Exploited SonicWall SMA zero-days put remote access gateways on the clock

Exploited SonicWall SMA zero-days put remote access gateways on the clock SonicWall has released urgent fixes for two exploited zero-day vulnerabilities in its...

Last updated on 17/08/2026 at 12:56 PM

7 min read

Lucas Oliveira

Research

Exploited Joomla extension flaws turn file uploads into emergency patch work

vulnerability

CVE

Exploited Joomla extension flaws turn file uploads into emergency patch work

Exploited Joomla extension flaws turn file uploads into emergency patch work CISA has added two exploited Joomla extension vulnerabilities to its Known Exploite...

Last updated on 17/08/2026 at 12:56 PM

9 min read

Lucas Oliveira

Research

BeyondTrust auth bypass flaws put remote support appliances on the urgent patch list

⭐ Featured

vulnerability

CVE

BeyondTrust auth bypass flaws put remote support appliances on the urgent patch list

BeyondTrust auth bypass flaws put remote support appliances on the urgent patch list BeyondTrust has disclosed four vulnerabilities in its Remote Support and Pr...

Last updated on 17/08/2026 at 12:56 PM

8 min read

Lucas Oliveira

Research

Gitea Docker flaw turns a trusted proxy header into account takeover

⭐ Featured

vulnerability

CVE

Gitea Docker flaw turns a trusted proxy header into account takeover

Gitea Docker flaw turns a trusted proxy header into account takeover Gitea has fixed a critical authentication bypass in its official Docker images that could l...

Last updated on 17/08/2026 at 12:56 PM

7 min read

Lucas Oliveira

Research

1 2 3 4 5

#Incident Response

Check Point CVE-2026-16232 puts firewall management in the blast radius

Windmill CVE-2026-29059 turns log access into a secrets problem

SharePoint CVE-2026-50522 makes patching only the first step

ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets

SharePoint RCE zero-day forces a July 19 incident-response deadline

Oracle E-Business Suite flaw hits CISA KEV as payment systems face takeover risk

FortiSandbox command injection flaws move from patch queue to exploited risk

Firefox and Chrome fixes turn browser patching into this week's urgent control

Exploited SonicWall SMA zero-days put remote access gateways on the clock

Exploited Joomla extension flaws turn file uploads into emergency patch work

BeyondTrust auth bypass flaws put remote support appliances on the urgent patch list

Gitea Docker flaw turns a trusted proxy header into account takeover

Tags