Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
CISA has added two actively exploited vulnerabilities in Zammad software to its Known Exploited Vulnerabilities Catalog, urging organizations to prioritize remediation of session fixation and privilege management flaws.
CISA reports an incorrect-authorization flaw in Ignition (CVE-2026-92817, CVSS 8.8) that lets a low-level authenticated user gain Designer-level privileges and run code on the Gateway. Versions 8.1.0–8.1.54 and 8.3.0–8.…
A privilege management flaw in Zammad allows local users to escalate privileges to root level, potentially enabling full system compromise when chained with another vulnerability.
Security researchers have published a working local privilege escalation exploit for OpenBSD 7.9 that chains a decades-old integer overflow in shared memory with a kernel vulnerability to gain root access.
A hex encoding vulnerability in Cisco Catalyst SD-WAN Manager allows unauthenticated remote attackers to gain admin privileges through improper URI encoding handling in HTTP requests.
Progress Software disclosed 31 vulnerabilities in MarkLogic Server, including two critical flaws that allow delegated managers to gain persistent administrator control. Patches were released in September.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
