Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
Arista has patched CVE-2026-114625, a critical SQL injection flaw in on-prem VeloCloud Orchestrator that is being exploited in attacks. Any authenticated user can gain operator privileges. Administrators should patch an…
Arista says attackers are exploiting a zero-day SQL injection flaw in VeloCloud Orchestrator, the management system for VeloCloud SD-WAN. Any user who can log in, even read-only, can gain operator privileges.
The Hacker News weekly recap points to 98 zero-days, rogue AI agents, a $100M crypto theft and 700 supermarkets hit, with trusted services and devices as entry points. The excerpt gives few details.
Amazon's threat intelligence team detected an attempt to exploit the PHP2Shell vulnerabilities on 17 October 2026, ahead of public disclosure. Broad exploitation in the wild has since been reported after patches were re…
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
