Verified analysis of major vulnerabilities, breaches and security incidents, with what to patch and do next.
An exploited Outlook bug leaks NTLMv2 hashes when a user opens a crafted message file. Which Office builds fix it, how to check them, and what else to patch in November 2026.
CVE-2026-123158 lets attackers log in to sshd on Alpine and other musl systems without PAM. A tested 5-minute check, the fixed package versions and the log line to look for.
October 2026 data breaches in India and worldwide: SBI, eMudhra, Japan's record month, health and developer-platform leaks, and what to do now.
Exploited vulnerabilities October 2026: PAN-OS, Cisco email gateway, SonicWall SMA1000, SiteGuard, Siemens and Apple. Fixed versions and actions.
Langflow CVE-2026-105740 is a critical MCP vulnerability with reported exploit attempts. Check Langflow, MCP SDK, Claude Code and x402 versions.
An AhsayCBS vulnerability chain is being exploited on MSP backup servers. Hotfix builds, version checks, IOCs and steps to protect your backups.
October 2026 npm supply chain attack wave: SubQuery, GhostAction, Tensorlake, Apex. Tested commands to check lockfiles, audit GitHub and rotate keys.
SharePoint ransomware from Warlock hit a water utility and telecom firm. Safe builds, AMSI, machine key rotation and IOC checks for on-prem farms.
Stolen ConnectWise app credential was used for Microsoft 365 tenant takeover attempts. How M365 admins and MSPs can check apps, logs and mailboxes.
A BeyondTrust vulnerability (CVE-2026-102764) in Remote Support was exploited as a zero-day since August. Who is affected, how to patch, and what to check.
