Newsletter — all editions

ITsecurity Daily — Friday, 6 November 2026: OpenSSH 'SSHole' exploited within hours of disclosure; WordPress and Ivanti flaws now on CISA's exploited list · 2026-11-07
Breach digest — Friday, 6 November 2026 · 2026-11-06
Exploited this week — Friday, 6 November 2026 · 2026-11-06
ITsecurity Daily — Friday, 6 November 2026 · 2026-11-06
ITsecurity Daily — Wednesday, 4 November 2026: APT package-manager flaw lets a man-in-the-middle run code as root on Debian and Ubuntu · 2026-11-05
ITsecurity Daily — Tuesday, 3 November 2026: CISA adds an actively exploited WordPress Core flaw to its KEV catalog, and a day of supply-chain and credential compromises · 2026-11-04
ITsecurity Daily — Monday, 2 November 2026: Max-severity OT bug under active exploitation, plus two exploited Ivanti flaws added to CISA's KEV · 2026-11-03
ITsecurity Daily — Sunday, 1 November 2026: Patch Chrome now — Google lists six critical flaws; FBI pins $6.3bn Binance heist on North Korea · 2026-11-02
Fundamentals — Sunday, 1 November 2026 · 2026-11-01
ITsecurity Daily — Saturday, 31 October 2026: Ivanti Connect Secure flaws under active exploitation added to CISA KEV; Google ships six high-severity Chrome fixes · 2026-11-01
ITsecurity Daily — Friday, 30 October 2026: CISA flags two actively exploited Ivanti Connect Secure flaws; Anthropic researchers build remote-root Linux MPTCP exploit · 2026-10-31
Breach digest — Friday, 30 October 2026 · 2026-10-30
Exploited this week — Friday, 30 October 2026 · 2026-10-30
ITsecurity Daily — Friday, 30 October 2026 · 2026-10-30
ITsecurity Daily — Wednesday, 28 October 2026: CISA flags two actively exploited flaws in VMware ESX and the Linux kernel · 2026-10-29
ITsecurity Daily — Tuesday, 27 October 2026: CISA flags two actively exploited flaws — Adobe Commerce/Magento and Google Brotli — as the Brotli bug spreads well beyond Node.js · 2026-10-28
ITsecurity Daily — Monday, 26 October 2026: CISA flags two actively exploited PHP flaws as Brotli patches cascade across vendors · 2026-10-27
ITsecurity Daily — Sunday, 25 October 2026: PHP2Shell flaws under active exploitation — one hit a European government within two hours · 2026-10-26
ITsecurity Daily — Sunday, 25 October 2026 · 2026-10-25
ITsecurity Daily — Friday, 23 October 2026: CISA flags actively exploited Arista VeloCloud SQL injection as PHP warns of an unpatched 9.8 RCE · 2026-10-24
Breach digest — Friday, 23 October 2026 · 2026-10-23
Exploited this week — Friday, 23 October 2026 · 2026-10-23
ITsecurity Daily — Thursday, 22 October 2026: Arista VeloCloud Orchestrator zero-day under active attack; PHP ships emergency RCE patches · 2026-10-23
ITsecurity Daily — Thursday, 22 October 2026 · 2026-10-22
ITsecurity Daily — Tuesday, 20 October 2026: Eight eMudhra CA keys compromised, forcing emergency distrust across browsers — Palo Alto PAN-OS under active ransomware attack · 2026-10-21
ITsecurity Daily — Monday, 19 October 2026: Three actively exploited flaws hit CISA's KEV list — Palo Alto, Microsoft and Ivanti all need patching · 2026-10-20
ITsecurity Daily — Sunday, 18 October 2026: ConnectWise disables seven of its own app identities after attackers use them to break into Microsoft 365 tenants · 2026-10-19
ITsecurity Daily — Saturday, 17 October 2026: ConnectWise Cloud Backup credential abused to sign in to 173 Microsoft 365 tenants; three flaws CISA lists as exploited · 2026-10-18
ITsecurity Daily — Friday, 16 October 2026: CISA adds actively-exploited BeyondTrust Remote Support auth bypass to its KEV catalog · 2026-10-17
Breach digest — Friday, 16 October 2026 · 2026-10-16
Exploited this week — Friday, 16 October 2026 · 2026-10-16
ITsecurity Daily — Thursday, 15 October 2026: Three actively-exploited flaws lead Thursday's fixes — Ivanti, Microsoft and Palo Alto · 2026-10-16
ITsecurity Daily — Thursday, 15 October 2026 · 2026-10-15
ITsecurity Daily — Tuesday, 13 October 2026: Actively exploited Ivanti Connect Secure zero-day headlines a record 1,411-flaw Patch Tuesday · 2026-10-14
ITsecurity Daily — Monday, 12 October 2026: GitLab urges an immediate patch for a max-severity RCE flaw as Google fixes six critical Chrome vulnerabilities — patch both today · 2026-10-13
ITsecurity Daily — Monday, 12 October 2026 · 2026-10-12
ITsecurity Daily — Saturday, 10 October 2026: Citrix NetScaler flaw under active attack leads a day dominated by Chrome fixes, arrests and AI-agent abuse · 2026-10-11
ITsecurity Daily — Friday, 9 October 2026: Citrix NetScaler flaw is being exploited now — CISA lists it, Google ships five critical Chrome fixes the same day · 2026-10-10
Breach digest — Friday, 9 October 2026 · 2026-10-09
Exploited this week — Friday, 9 October 2026 · 2026-10-09
ITsecurity Daily — Friday, 9 October 2026 · 2026-10-09
ITsecurity Daily — Wednesday, 7 October 2026: FBI, CISA and researchers flag three edge-device flaws under active attack as Citrix NetScaler bug lands on KEV · 2026-10-08
ITsecurity Daily — Wednesday, 7 October 2026 · 2026-10-07
ITsecurity Daily — Tuesday, 6 October 2026 · 2026-10-06
ITsecurity Daily — Sunday, 4 October 2026: Citrix patches an actively exploited NetScaler zero-day; CISA orders federal remediation · 2026-10-05
ITsecurity Daily — Saturday, 3 October 2026: Three actively exploited flaws land on CISA's KEV list — Citrix, Apple patch now · 2026-10-04
ITsecurity Daily — Friday, 2 October 2026: Fortinet FortiMail zero-day under active attack as CISA flags fresh exploited flaws · 2026-10-03
Breach digest — Friday, 2 October 2026 · 2026-10-02
Exploited this week — Friday, 2 October 2026 · 2026-10-02
ITsecurity Daily — Thursday, 1 October 2026: Fortinet FortiMail zero-day under active attack tops a heavy patch day for Citrix, Apple and Chrome · 2026-10-02
Fundamentals — Thursday, 1 October 2026 · 2026-10-01
ITsecurity Daily — Thursday, 1 October 2026 · 2026-10-01
ITsecurity Daily — Tuesday, 29 September 2026: Citrix NetScaler exploitation goes from stealth to mass attacks; Apple flaw added to KEV · 2026-09-30
ITsecurity Daily — Monday, 28 September 2026: Actively exploited Citrix ADC flaws top the day; ShinyHunters run a new Oracle PeopleSoft campaign as the FBI's job sites stay offline · 2026-09-29
ITsecurity Daily — Sunday, 27 September 2026: Citrix NetScaler zero-days under active exploitation top a heavy day for defenders · 2026-09-28
ITsecurity Daily — Saturday, 26 September 2026: ShinyHunters bypasses WAF filtering to resume mass exploitation of Oracle PeopleSoft · 2026-09-27
ITsecurity Daily — Friday, 25 September 2026: Kiteworks tells customers to power down servers Saturday over warning of a potential attack · 2026-09-26
Breach digest — Friday, 25 September 2026 · 2026-09-25
Exploited this week — Friday, 25 September 2026 · 2026-09-25
ITsecurity Daily — Thursday, 24 September 2026: CISA flags two actively exploited flaws in WSO2 and Adobe Commerce/Magento — patch on the clock · 2026-09-25
ITsecurity Daily — Wednesday, 23 September 2026: F5 BIG-IP APM under active attack via critical 0-day RCE — patch is out · 2026-09-24
ITsecurity Daily — Tuesday, 22 September 2026: CISA flags four actively exploited flaws — in Check Point, Arista, and F5 gear — as WordPress and Chrome ship urgent fixes · 2026-09-23
Daily Briefing — Monday, 21 September 2026: Google names fixed Chrome releases for six critical flaws as CISA flags active exploitation in Linux and Zyxel gear · 2026-09-22
Daily brief — Saturday, 19 September 2026 · 2026-09-19
Breach digest — Friday, 18 September 2026 · 2026-09-18
Exploited this week — Friday, 18 September 2026 · 2026-09-18
Daily brief — Wednesday, 16 September 2026 · 2026-09-16
Daily brief — Tuesday, 15 September 2026 · 2026-09-15
Daily brief — Monday, 14 September 2026 · 2026-09-14
Daily brief — Sunday, 13 September 2026 · 2026-09-13
Daily brief — Saturday, 12 September 2026 · 2026-09-12
Breach digest — Friday, 11 September 2026 · 2026-09-11
Exploited this week — Friday, 11 September 2026 · 2026-09-11
Daily brief — Friday, 11 September 2026 · 2026-09-11