Policy & Government
Pentagon Suspends CMMC Phase 2 Requirements for Defense Contractors
A CMMC-framework pause from the Pentagon — defense-contractor compliance work re-scoped this week.
Latest
Policy & Government
US Treasury Sanctions First VPN Service, Malware Cryptor Seller Over Ransomware Support
A US Treasury sanctions package targeting VPN and cryptor infrastructure that reportedly supports ransomware — regulatory coverage this week.
Vulnerabilities
Researchers Disclose RabbitMQ Flaws That Could Leak OAuth Secrets, Expose Cross-Tenant Queue Metadata
A message-queue vulnerability with OAuth and multi-tenancy implications — defender review for RabbitMQ deployments this week.
Vulnerabilities
VMware Patches Seven Severe Avi Load Balancer Vulnerabilities
A seven-flaw Avi Load Balancer patch cycle from VMware — defender verification this week.
Vulnerabilities
iCagenda and Balbooa Forms Joomla Zero-Days Reportedly Exploited in the Wild
Two Joomla-extension zero-days under active attack — Joomla operators accelerate patch verification this week.
Vulnerabilities
SonicWall SMA Appliances Under Active Zero-Day Attack via CVE-2026-15409 and CVE-2026-15410
Two SonicWall SMA zero-days under active attack — immediate defender posture review this week.
Vulnerabilities
Adobe Publishes Critical ColdFusion Patches as Its Vulnerability Thread Continues
Adobe's ColdFusion patch cycle continues — defender verification across deployments this week.
Vulnerabilities
SAP Patches CVSS 9.9 NetWeaver ABAP Flaw, Plus Approuter and Commerce Cloud
A CVSS 9.9 NetWeaver ABAP flaw anchors SAP's critical patch cycle — defender verification across products this week.
Vulnerabilities
Researchers Flag 11 Old Microsoft-Signed Linux UEFI Shims That Could Bypass Secure Boot
Eleven old Microsoft-signed shims land as bypasses of Secure Boot — Linux-boot defender review this week.
Vulnerabilities
Ars Technica Documents a Decade-Old Weakness in Microsoft's Secure Boot
A decade-old Secure Boot revelation — lifecycle-security implications for defender teams this week.
Vulnerabilities
Microsoft Patches SharePoint JWT Authentication-Bypass Flaw (CVE-2026-55040)
A SharePoint JWT auth bypass patched in July's Patch Tuesday — defender verification this week.
Vulnerabilities
Microsoft Ships a Record 622-CVE Patch Tuesday With Two Zero-Days Under Active Attack
Microsoft's July Patch Tuesday breaks its own record — 622 CVEs, two zero-days under active attack, and defender triage stakes rise this week.