Product updates, the weekly threat signal, and monthly trends — what shipped, what's exploited, and where we're heading.
CVSS is severity, KEV is confirmed exploitation, EPSS is probability. They answer different questions and the moment you equate them you start patching the wrong CVEs. A field guide, plus how the three become a single cut-line in My Stack.
On August 6, 2026, at Black Hat USA, Synack Red Team researcher Malcolm Stagg told the room that the trust model underneath nearly every NAT device on the planet is broken. Two vendors listened and…
Here's the question worth asking whenever a framework bolts on "free" image processing: if the web layer checks a file's label, and a native image library checks its bytes, who actually decides what…
On August 4, 2026, Veeam published KB4892 disclosing six vulnerabilities in Veeam ONE — the monitoring and reporting layer that sits across an organization's backup and virtualization estate. The…
N-central is the console MSPs use to manage hundreds of client networks from one screen — patching, monitoring, and, critically, a built-in remote-access feature called Take Control. That design is…
Cisco Integrated Management Controller (IMC) is the out-of-band console welded to every UCS rack server — the thing you reach when the operating system on top of it is unresponsive, unbootable, or…
On July 29, 2026, Broadcom shipped VMSA-2026-0006, patching five vulnerabilities across VMware ESX, vCenter, Workstation and Fusion. Three are rated Critical and read like a greatest-hits list of…
Cisco Unified Communications Manager (Unified CM) is the call-processing brain behind enterprise VoIP — the box that routes calls, holds the dial plan, and talks to every phone, gateway and trunk…
You're reading one CVE. The Watch button asks for one click and no signup, then remembers the product for you. It's the easiest on-ramp to My Stack — and I'll be honest about why it's a garnish, not the way to build a whole inventory.
Every horror franchise eventually runs out of new monsters and reboots the old one with a smaller budget and a meaner attitude. Sequels rarely improve on the original — they're usually cheaper,…
Picture the one box in your network whose whole job is to be trusted. Not a firewall — the thing that programs the firewalls: the management center that pushes policy, signatures and access rules…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18577, an authentication-bypass flaw in N-able's N-central remote monitoring and management platform, to its Known…
On August 4, 2026, CISA added CVE-2026-34486 — a bypass of Apache Tomcat's cluster-traffic encryption — to the Known Exploited Vulnerabilities catalog, alongside an IBM Langflow RCE and an N-able…
On July 27, 2026, JetBrains disclosed CVE-2026-63077 — an unauthenticated remote code execution flaw in TeamCity On-Premises. It is rated CVSS 9.8, and all an attacker needs is network reach to…
There is a comfortable story we tell ourselves: buy a security box, and the attack surface gets smaller. For most of 2026, the exploited-in-the-wild list has been telling a different one. The guardians are the gate now — and the common thread across the year's most-attacked machines isn't a bug class, it's a target class.
Cisco Secure Firewall Management Center (FMC) is not a firewall. It is the control plane — the console that pushes policy, rules and software to every Firepower Threat Defense (FTD) box in your…
CVE-2026-6875 is an unauthenticated sandbox escape in the ServiceNow AI Platform that turns a pre-auth "thanks for completing the assessment" page into full instance compromise. Here's the escalating chain, the hosted-vs-self-hosted split, and why the exploit index looks quiet while EPSS sits in the 97th percentile.
Microsoft's July 14 Patch Tuesday quietly fixed two CVSS 9.8 unauthenticated RCEs in Windows DHCP Server. Here's why a memory-corruption bug in core network infrastructure is a worst-case blast radius — and how to triage it before a public exploit exists.
Every quarter Oracle ships a Critical Patch Update, and every quarter a little part of me braces before opening the advisory — it's a wall of hundreds of fixes across products most of us have never…
A real environment is hundreds of products across dozens of versions. You don't type that. Here's the CLI: scan a host, import an SBOM, or run an ad-hoc 'am I affected?' check from CI — with a local-only option that never uploads your inventory.
