Heads up for small businesses, creators, and IT teams: a fresh advisory from the Cybersecurity and Infrastructure Security Agency (CISA) landed within the last 24 hours, highlighting a troubling pattern from Medusa ransomware operators. The attackers are described as stealing… Read More »CISA Advisory: Medusa ransomware steals data, disables security tools, and encrypts networks
If you run GitLab on your own servers or rely on self-hosted features, a newly patched flaw in the AI Gateway could affect your CI/CD environment. The issue is serious, but you can manage it with a few practical steps.… Read More »GitLab AI Gateway vulnerability CVE-2026-90970: what you need to know and how to protect your GitLab deployments
Ransomware headlines come and go, but some campaigns remind us to check our own defences. Dark Reading reports that the Warlock ransomware group has hit large Spanish and Portuguese organizations, highlighting how quickly an incident can ripple across sectors. What… Read More »Warlock ransomware hits large Spanish and Portuguese organizations: what you can do now
If you manage Cisco SD-WAN gear, a new high-priority item landed in your security inbox today. A Cisco Catalyst SD-WAN Manager authentication bypass has been moved into CISA’s Known Exploited Vulnerabilities catalog, which means it’s considered actively exploited and urgent… Read More »CISA adds Cisco Catalyst SD-WAN Manager auth bypass to KEV: What small businesses should do now
When a big company confirms a data breach connected to a supplier, it’s a reminder that security isn’t just about your own network—it’s about who you trust with your data. Volvo Group recently disclosed a data breach linked to a… Read More »Volvo Group Discloses Data Breach Tied to HR Supplier Ransomware
Earlier this week, a zero-day vulnerability affecting Cisco Catalyst SD-WAN Manager was actively exploited in the wild, allowing remote attackers to gain administrative access to affected appliances. Cisco released a security advisory and patches to address the issue. Details are… Read More »Cisco Catalyst SD-WAN Manager Zero-Day Exploited: What You Need to Do Now
Ransomware threats are evolving, and official guidance just dropped from CISA to help you stay ahead. The latest advisory focuses on defense-in-depth and practical controls you can implement now. What happened On a recent update, the U.S. Cybersecurity and Infrastructure… Read More »CISA’s latest ransomware advisory: what it means for you
Open-source tools power many small teams and startups, but they can also be attractive targets for attackers. A recent disclosure about Zammad shows how quickly unpatched flaws can become critical. If you rely on Zammad for ticketing, this is a… Read More »Two zero-day flaws in Zammad exposed by DIVD disclosure
If you manage any servers, devices, or apps, today’s update from CISA should be a top item on your security to-do list. When a vulnerability lands in the Known Exploited Vulnerabilities (KEV) catalog, it’s a signal that attackers are actively… Read More »Why CISA’s Known Exploited Vulnerabilities update matters and how to respond
Two bits of news you should act on today: a Microsoft SharePoint Server vulnerability has landed in the Known Exploited Vulnerabilities catalog, and exploitation reports are circulating. If you run SharePoint on-premises, this deserves your attention now. What happened On… Read More »CISA Adds CVE-2026-65660 to KEV: Patch Microsoft SharePoint Server Now