Edward Ye
Steam's BrokenPipe vulnerability allows an unprivileged Windows user to escalate to SYSTEM through the Steam Client Service. With no patch available, organisations should review exposure and apply mitigations.
A critical WSO2 API Manager vulnerability allows attackers to forge administrative JWT tokens and gain unauthorised access. Organisations should patch affected systems and check for signs of compromise.
Microsoft’s September 2026 Patch Tuesday includes nearly 974 fixes and two actively exploited Windows zero-days. Learn how to prioritise the release based on exploitation and exposure.
A Chrome zero-day, CVE-2026-85046, is under active attack. Here’s what Australian businesses need to know and why updating browsers immediately matters.
MikroTik RouterOS zero-days are under active attack, with the MikroTrick exploit chain enabling attackers to bypass authentication and take control of exposed devices.
SQL injection remains one of the most damaging web application flaws. Learn how it works, why it persists, how to prevent it, and why validated testing matters.
PaperCut NG and MF face an actively exploited zero-day affecting all supported versions. Here is what organisations running print management should do now.
CVE-2026-8452 was originally rated as a denial-of-service flaw but is now being exploited for remote code execution. Learn what Australian organisations should do.
A critical GitLab flaw is under active attack. Organisations running self-hosted GitLab should patch immediately, review projects for tampering and rotate exposed secrets.
Third-party and supply-chain risk can expose your organisation through trusted vendors, partners and software providers. Learn how to vet suppliers, set security requirements and continuously monitor vendor risk.
Cisco has confirmed active exploitation of CVE-2026-20349, a high-severity flaw affecting ASA and FTD firewalls. The vulnerability can let unauthenticated attackers remotely force affected devices to reload through vulnerable remote access services. Here is what Australian organisations running Cisco firewalls need to do now.
A critical Progress Kemp LoadMaster vulnerability has been added to CISA's Known Exploited Vulnerabilities catalogue after exploitation activity was observed. Learn why internet-facing load balancers require immediate attention.