Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
Threats and Incidents CERT-FR warns of compromises affecting Danfoss AK-SM and AK-SC devices. Review exposure, agree service access and prepare configuration recovery.
Vulnerabilities and CVEs GitLab released patches 19.2.8, 19.3.5 and 19.4.2. Review your instance, prepare the upgrade and confirm that required CI/CD workflows still operate.
Cloud, Infrastructure and DevSecOps Windows 11 24H2 Home and Pro reaches end of updates on 13 October 2026. Review editions, assign migration owners and verify the outcome across your fleet.
Vulnerabilities and CVEs Huntress reports exploitation of CVE-2026-105133 and CVE-2026-105134 in AhsayCBS. Assess exposure, verify remediation and prepare an incident response.
AI Security Anthropic's 9 October report highlights unintended agent actions. Define test scope, tool permissions and stopping conditions before evaluating an AI workflow.
Human Security Push Security describes an ad leading to a fake Claude installer for macOS. Respond to requests to paste a command and report what happened to your IT team.
Threats and Incidents A new Integrity Tech advisory and the seizure of Microscan and FishHub infrastructure. Turn threat information into a review of mailbox and remote access.
AI Security CVE-2026-93034 affects SGLang deserialisation. Review exposure conditions, communication between nodes and the limits of the SGLANG_USE_PICKLE_IPC flag.
Governance and Compliance A SANS commentary from 10 October highlights the limits of TLP. Make better decisions about sharing reports, working with partners and using AI tools.
Threats and Incidents A valid token and an allowed IP address do not approve a payout. Lessons for fintechs, finance teams and the owners of payment integrations.
Cloud, Infrastructure and DevSecOps Pre-authentication SSRF requires an update to the remote-access appliance. Check the branch, hotfix number, change owner and employee communication.
Vulnerabilities and CVEs Review Veeam Backup & Replication 12 versions and access. Apply the fix, verify backup operations and prepare the team to respond to suspicious activity.
Cloud, Infrastructure and DevSecOps Match devices to their software branches, confirm fix availability and prepare a maintenance window. Track completed updates and releases still awaited.
Human Security Verify a new customer's quotation request before running an attachment. Establish a procedure for sales, procurement and IT, with a clear reporting route.
AI Security Check Splunk MCP Server 1.2.1, tool administrators and configured destinations. AI integration approval needs a clear assessment of credential handling.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
