Our Blog
CISA added nine new vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog during the past seven days, spanning enterprise collaboration platforms (Microsoft SharePoint), identity services (AD FS), sandboxing solutions (Fortinet FortiSandbox), access gateways (SonicWall SMA1000), financial ERP suites (Oracle E-Business Suite), and industrial automation protocols (KNX). The most significant operational trend is the concentrated targeting of remote access gateways, internal sandboxing infrastructure, and enterprise collaboration platforms for unauthenticated command injection, SSRF, and privilege escalation. Security, vulnerability management, and infrastructure teams should prioritize perimeter appliances, identity providers, and SharePoint environments for immediate validation and remediation activity.
Reading time 10 minutes
CVSS assigns severity scores to vulnerabilities based on theoretical impact. EPSS predicts which vulnerabilities adversaries will actually exploit within 30 days. Security teams managing 41,000+ annual CVEs with 56% scored High or Critical face a prioritization crisis where traditional scoring fails operational reality.
Reading time 10 minutes
Attackers breached Okta's support system, stealing session tokens from 18,400 users. Learn the four control failures that enabled the attack, why MFA didn't help, how other organisation avoided compromise and get a security operator checklist with actions to take to protect your organisation.
Reading time 10 Minutes
CISA added eight new vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog during the past seven days, spanning legacy Cisco infrastructure, multiple Joomla ecosystem extensions, Adobe ColdFusion, Langflow, and Microsoft SharePoint Server. The most significant operational trend is the concentration of unauthenticated file upload vulnerabilities affecting public-facing web applications, many of which provide immediate paths to web shell deployment and remote code execution. Security, vulnerability management, and infrastructure teams should prioritise internet-facing web applications and collaboration platforms for immediate exposure validation and remediation activity.
Reading time 10 minutes