Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
CISA has published an advisory detailing multiple security vulnerabilities in its Malcolm network traffic analysis platform, including cross-site scripting, command injection, and authentication bypass flaws.
CISA has added two actively exploited vulnerabilities in Zammad software to its Known Exploited Vulnerabilities Catalog, urging organizations to prioritize remediation of session fixation and privilege management flaws.
CISA has published a #StopRansomware advisory on the SafePay group, active since August 2024 against businesses and critical infrastructure. It describes how the group gains access, spreads and encrypts data, and urges…
CISA lists CVE-2025-39964, a Linux kernel race condition where concurrent writes to one AF_ALG socket can interleave data and corrupt internal state. Apply vendor mitigations and assess internet exposure.
CISA lists an OS command injection flaw, CVE-2026-106931, in SiteGuard Server Edition that could let an attacker run commands with root or SYSTEM privileges. Vendor mitigations should be applied and exposure reviewed.
CISA urges immediate patching of CVE-2026-109618 and CVE-2026-109619 in PHP, which allow unauthenticated remote code execution. No exploitation has been observed so far, but fixed versions are available.
CISA and partner agencies report that SafePay ransomware has affected at least 600 critical infrastructure organizations since August 2024, mainly via exposed credentials, brute force and VPN access, and unpatched edge…
CISA has catalogued CVE-2026-21589 affecting multiple Atlassian products due to evidence of active exploitation, urging organizations to prioritize remediation of this file access vulnerability.
A critical command injection vulnerability in Ahsay AhsayCBS allows remote attackers to execute operating system commands through the Replication Receiver component, requiring immediate patching.
Apple has disclosed an out-of-bounds write vulnerability in CoreGraphics affecting iOS, macOS and iPadOS that may enable arbitrary code execution.
Citrix NetScaler ADC and Gateway products contain an improper input validation vulnerability allowing unauthenticated attackers to execute arbitrary commands remotely.
CISA has identified a critical authentication bypass vulnerability in BeyondTrust Remote Support, urging organizations to apply patches and upgrade their systems to mitigate risks.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
