Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
Drupal released security updates on 14 October addressing a critical remote code execution flaw in the Field UI module, with at least one known exploit path requiring no authentication.
Security researchers have disclosed over 27 vulnerabilities this week, including remote code execution flaws in Adobe products, container escape issues in NVIDIA software, and DNS-based cryptocurrency wallet theft techn…
A critical command injection vulnerability in Ahsay AhsayCBS allows remote attackers to execute operating system commands through the Replication Receiver component, requiring immediate patching.
Microsoft confirmed that October 2026 Windows Server security updates are causing sign-in failures and mail delivery issues on some Exchange Server systems due to insufficient memory limits for Endpoint Mapper.
A path traversal vulnerability in WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway permits unrestricted file upload and may lead to remote code execution.
Security researchers have published a working local privilege escalation exploit for OpenBSD 7.9 that chains a decades-old integer overflow in shared memory with a kernel vulnerability to gain root access.
Apple has disclosed an out-of-bounds write vulnerability in CoreGraphics affecting iOS, macOS and iPadOS that may enable arbitrary code execution.
A path traversal vulnerability in ONLYOFFICE Docs when JWT authentication is enabled allows attackers to upload malicious images and potentially execute remote code on affected servers.
Citrix NetScaler ADC and Gateway products contain an improper input validation vulnerability allowing unauthenticated attackers to execute arbitrary commands remotely.
A critical remote file inclusion vulnerability in WordPress Core permits unauthenticated attackers to execute arbitrary code by forcing page-template resolution to include local PHP files outside theme directories.
Progress Software disclosed 31 vulnerabilities in MarkLogic Server, including two critical flaws that allow delegated managers to gain persistent administrator control. Patches were released in September.
Cisco Secure Email Gateway contains a path traversal vulnerability allowing unauthenticated remote attackers to write arbitrary files to the operating system, requiring immediate vendor patches.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
