Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
A critical remote file inclusion vulnerability in WordPress Core permits unauthenticated attackers to execute arbitrary code by forcing page-template resolution to include local PHP files outside theme directories.
Check Point Security Gateway and Spark Firewall products using VPN features contain a certificate validation flaw allowing unauthenticated remote attackers to execute arbitrary code.
A critical authenticated remote code execution vulnerability in Langflow, an open-source AI application platform, has been targeted in over 1,400 exploit attempts recorded by honeypot systems.
NGINX released versions 1.30.6 and 1.31.7 on October 14 to address five vulnerabilities, including three memory flaws that may enable remote code execution and a TLS bug allowing session forgery.
F5 BIG-IP APM contains a heap-based buffer overflow vulnerability allowing unauthenticated remote code execution when access policy and OAuth profile are configured on a virtual server.
Apache Struts contains a command injection vulnerability enabling remote attackers to execute arbitrary code when Dynamic Method Invocation is enabled, requiring immediate vendor patches.
A maximum-severity vulnerability in the Bricksforge WordPress plugin is being actively exploited, allowing unauthenticated attackers to execute arbitrary code remotely.
GitLab has released patches for a critical vulnerability allowing unauthenticated remote code execution through malicious regular expressions in CI/CD configuration files.
A critical vulnerability in the Savannah lwIP SMTP client could lead to remote code execution due to a buffer overflow. Institutions using affected versions should take immediate action to mitigate risks.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
