Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
A proof-of-concept exploit is now public for CVE-2026-106173 (CVSS 9.4), a patched path traversal flaw in Fortinet FortiSIEM that can let an unauthenticated attacker run unauthorized code or commands.
A cleartext storage vulnerability in Strapi CMS allows attackers with admin panel access to discover sensitive user details through query filters, with potential for remote code execution when chained with another flaw.
CISA urges immediate patching of CVE-2026-109618 and CVE-2026-109619 in PHP, which allow unauthenticated remote code execution. No exploitation has been observed so far, but fixed versions are available.
Researchers have published a working exploit for a pre-authentication remote code execution flaw in AnyDesk for Linux that grants root access. AnyDesk fixed it in version 8.0.3 in June, but described the fix only as a c…
Drupal released security updates on 14 October addressing a critical remote code execution flaw in the Field UI module, with at least one known exploit path requiring no authentication.
Security researchers have disclosed over 27 vulnerabilities this week, including remote code execution flaws in Adobe products, container escape issues in NVIDIA software, and DNS-based cryptocurrency wallet theft techn…
Attackers are exploiting CVE-2026-110447, a critical command execution vulnerability in Nextcloud's Collabora app, to deploy webshells and search for credentials since mid-September.
A path traversal vulnerability in WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway permits unrestricted file upload and may lead to remote code execution.
F5 has released out-of-band patches for three critical NGINX vulnerabilities enabling remote code execution and denial-of-service attacks on systems with non-default configurations.
A session fixation vulnerability in Zammad GmbH Zammad can lead to remote code execution as the zammad user and may be chained with another vulnerability.
A path traversal vulnerability in ONLYOFFICE Docs when JWT authentication is enabled allows attackers to upload malicious images and potentially execute remote code on affected servers.
Citrix NetScaler ADC and Gateway products contain an improper input validation vulnerability allowing unauthenticated attackers to execute arbitrary commands remotely.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
