Product updates, the weekly threat signal, and monthly trends — what shipped, what's exploited, and where we're heading.
Cisco Integrated Management Controller (IMC) is the out-of-band console welded to every UCS rack server — the thing you reach when the operating system on top of it is unresponsive, unbootable, or…
On July 29, 2026, Broadcom shipped VMSA-2026-0006, patching five vulnerabilities across VMware ESX, vCenter, Workstation and Fusion. Three are rated Critical and read like a greatest-hits list of…
Cisco Unified Communications Manager (Unified CM) is the call-processing brain behind enterprise VoIP — the box that routes calls, holds the dial plan, and talks to every phone, gateway and trunk…
You're reading one CVE. The Watch button asks for one click and no signup, then remembers the product for you. It's the easiest on-ramp to My Stack — and I'll be honest about why it's a garnish, not the way to build a whole inventory.
Every horror franchise eventually runs out of new monsters and reboots the old one with a smaller budget and a meaner attitude. Sequels rarely improve on the original — they're usually cheaper,…
Picture the one box in your network whose whole job is to be trusted. Not a firewall — the thing that programs the firewalls: the management center that pushes policy, signatures and access rules…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18577, an authentication-bypass flaw in N-able's N-central remote monitoring and management platform, to its Known…
On August 4, 2026, CISA added CVE-2026-34486 — a bypass of Apache Tomcat's cluster-traffic encryption — to the Known Exploited Vulnerabilities catalog, alongside an IBM Langflow RCE and an N-able…
On July 27, 2026, JetBrains disclosed CVE-2026-63077 — an unauthenticated remote code execution flaw in TeamCity On-Premises. It is rated CVSS 9.8, and all an attacker needs is network reach to…
There is a comfortable story we tell ourselves: buy a security box, and the attack surface gets smaller. For most of 2026, the exploited-in-the-wild list has been telling a different one. The guardians are the gate now — and the common thread across the year's most-attacked machines isn't a bug class, it's a target class.
Cisco Secure Firewall Management Center (FMC) is not a firewall. It is the control plane — the console that pushes policy, rules and software to every Firepower Threat Defense (FTD) box in your…
CVE-2026-6875 is an unauthenticated sandbox escape in the ServiceNow AI Platform that turns a pre-auth "thanks for completing the assessment" page into full instance compromise. Here's the escalating chain, the hosted-vs-self-hosted split, and why the exploit index looks quiet while EPSS sits in the 97th percentile.
Microsoft's July 14 Patch Tuesday quietly fixed two CVSS 9.8 unauthenticated RCEs in Windows DHCP Server. Here's why a memory-corruption bug in core network infrastructure is a worst-case blast radius — and how to triage it before a public exploit exists.
Every quarter Oracle ships a Critical Patch Update, and every quarter a little part of me braces before opening the advisory — it's a wall of hundreds of fixes across products most of us have never…
A real environment is hundreds of products across dozens of versions. You don't type that. Here's the CLI: scan a host, import an SBOM, or run an ad-hoc 'am I affected?' check from CI — with a local-only option that never uploads your inventory.
CVE-2026-20253 is an unauthenticated arbitrary file-write in a PostgreSQL sidecar service that Splunk Enterprise 10.x ships alongside Edge Processor, OpAmp and SPL2 pipelines. It scores CVSS 9.8, sits at the 99.87th EPSS percentile, and is on CISA KEV with limited in-the-wild exploitation confirmed. Here's the missing-auth root cause, the exact affected versions, and how to patch — or disable the sidecar — without losing features.
Cisco Secure Firewall Management Center ships with a hard-coded, low-privilege account. It scores CVSS 5.3 - but it is actively exploited, KEV-listed, and Cisco rates it High because it chains to privilege escalation on the box that manages your firewalls.
CVE-2026-16723 is a CVSS 9.0 RCE in fastjson 1.2.68-1.2.83 that needs no autoType and no classpath gadget, is being actively exploited, and is fixed in 1.2.84. Exploit chain, exposure check, detection rules and remediation.
CVE-2026-16812 is a CVSS 10.0, unauthenticated OS command-injection flaw in VeloCloud Orchestrator On-Prem. Here's the chain, who's affected, the fixed builds, and how to detect and remediate it.
With one ordinary domain account and no admin rights, CVE-2026-54121 ("Certighost") makes an AD CS Certificate Authority issue a Domain-Controller-identity certificate -- a straight line to DCSync and domain takeover. Here's the chain, how to detect it, and how to fix it.
