Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Vulnerabilities and CVEs CISA added Linux kernel CVE-2026-46300 and VMware ESX CVE-2026-41709 to KEV. Learn what to patch and how to check for earlier compromise.
Vulnerabilities and CVEs Google disclosed CVE-2026-93327 in Application Integration. An authenticated user could execute code through SubWorkflow. Here is what customers should review.
Vulnerabilities and CVEs WatchGuard disclosed several critical Fireware OS flaws, including pre-authentication RCE. Check affected releases, exposed features and the safe upgrade plan.
AI Security What should employee AI training cover? Learn about AI literacy, Article 4 of the AI Act, role-based content, safe data use and useful metrics.
Human Security How should you choose employee cybersecurity training? Compare programme content, formats, metrics, supplier questions and an effective rollout plan.
Human Security How do you run a safe phishing simulation for employees? Learn the stages, scenarios, privacy safeguards, useful metrics and supplier questions.
Vulnerabilities and CVEs Fortinet released coordinated security fixes. Check affected FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator versions and plan the rollout.
Vulnerabilities and CVEs Next.js 16.4.1 and 15.5.28 fix two critical RCEs and a denial-of-service flaw. Learn which applications are exposed and how to deploy the update safely.
Vulnerabilities and CVEs Oracle's October 2026 Critical Patch Update contains 1,295 new fixes. Prioritise Database, MySQL, WebLogic, E-Business Suite and other affected systems.
Vulnerabilities and CVEs GitLab fixed CVE-2026-110264 with a 10.0 score. We explain affected versions, patch priority, detection and organisational response.
Supply Chain Security A compromised LiteLLM 1.107.0 reached PyPI and container registries. We explain exposure, credential rotation and trusted recovery.
Cloud, Infrastructure and DevSecOps ngCERT warns about publicly accessible Ubiquiti Discovery Service. We explain information leakage, DDoS risk and an organisational fix plan.
Vulnerabilities and CVEs CVE-2026-111497 in the Brotli decoder may expose memory, crash a service or enable code execution. Review Node.js, Envoy and interim Azure WAF protection.
Supply Chain Security GitHub Apps can now be installed at enterprise level. We explain the new permissions, classic PAT migration and controls for privileged automation.
Identity and Access The October Windows update enforces BlockNtlmv1SSO by default. Understand the impact on PEAP-MSCHAPv2, Wi-Fi, Ethernet and VPN, and plan a safe migration.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
We turn current threats into role-based training, safe exercises and a clear reporting path. The free Academy remains available for self-paced learning.
