Posts by Editorial Team
SonicWall SMA1000 RCE Vulnerability: Patch Now
A new SonicWall SMA1000 RCE vulnerability is under active exploitation: an unauthenticated server-side request forgery chained with an OS command injection lets an attacker take full root-level control of the appliance with no login required. CISA added both flaws to its Known Exploited Vulnerabilities catalog on September 2, with a federal deadline of September 5,…
Read MoreTop 5 Cybersecurity News Stories September 4, 2026
This week’s Cybersecurity News Stories September 4, 2026 illustrate a consistent challenge: the gap between a protective measure and what that measure actually closes. SonicWall enterprise remote-access appliances confirmed actively exploited via a zero-day chain requiring no credentials and no user interaction. Microsoft Exchange Server 2016 deployments without Extended Security Update eligibility facing an authentication…
Read MoreBoston Scientific Cyberattack Halts Global Shipments
A Boston Scientific cyberattack detected on August 25 has caused what the company itself calls a “global disruption” — halting order processing and shipping for one of the world’s largest manufacturers of pacemakers, defibrillators, stents and other implantable medical devices, with no confirmed restoration timeline more than a week later. What Happened The Boston Scientific…
Read MoreJFrog Artifactory Authentication Bypass Exploited
A JFrog Artifactory authentication bypass is now under active exploitation: attackers are minting themselves unauthenticated administrator tokens on self-hosted Artifactory instances just days after JFrog disclosed the flaw. Tracked as CVE-2026-82329 (CVSS 9.8), the bug sits in Artifactory’s default, out-of-the-box configuration — no misconfiguration required, no credentials needed. What Happened JFrog disclosed the JFrog Artifactory…
Read MoreDevice Code Phishing: What SMEs Need to Know
Cybercriminals have started exploiting a login shortcut millions of people already trust. Rather than sending victims to a fake login page or trying to steal a password outright, they persuade employees to authorise an attacker-controlled device through a completely legitimate identity provider — Microsoft, most often. The result is a fast-growing form of social engineering…
Read More