Cyber alerts

Published Tuesday 27 January 2026 (11:50) (updated 27 January 2026)

Microsoft Releases Out-of-Band Security Update for Microsoft Office

CVE-2026-21509 is under active exploitation and could be used to bypass OLE mitigations in Microsoft 365 and Microsoft Office

Published Thursday 22 January 2026 (04:26) (updated 22 January 2026)

Oracle Releases Security Advisory to Address a Critical Vulnerability in Oracle Fusion Middleware

Successful exploitation could allow an unauthenticated attacker with HTTP network access to create, delete, or modify critical data accessible through the Oracle HTTP Server and Oracle WebLogic Server Proxy Plug‑in

Published Friday 16 January 2026 (03:24) (updated 16 January 2026)

Palo Alto Networks Releases Security Update for PAN-OS

Palo Alto Networks releases security update for PAN-OS to address a high severity vulnerability that could result in a denial-of-service condition

Published Wednesday 14 January 2026 (01:34) (updated 9 September 2026)

Fortinet Releases Security Updates for FortiOS and FortiSwitch Manager

Advisory addresses a vulnerability which if exploited could allow a remote unauthenticated attacker to perform arbitrary code or command execution

Published Wednesday 14 January 2026 (01:27) (updated 14 January 2026)

Microsoft Releases January 2026 Security Updates

Scheduled updates for Microsoft products address 112 vulnerabilities, including an exploited information disclosure vulnerability and 2 others that have been publicly disclosed

Published Tuesday 30 December 2025 (09:42) (updated 30 December 2025)

CVE-2025-14847 in MongoDB Under Exploitation

A vulnerability in MongoDB could allow a remote attacker to extract secrets, credentials or other sensitive data

Published Friday 19 December 2025 (01:25) (updated 19 December 2025)

Critical Vulnerability in WatchGuard Firebox Under Exploitation

Successful exploitation of CVE-2025-14733 could allow a remote unauthenticated attacker to execute code remotely.

Published Thursday 18 December 2025 (01:35) (updated 18 December 2025)

SonicWall Releases Security Advisory for SonicWall SMA1000 Series Appliances

When chained together, CVE-2025-40602 and CVE-2025-23006 could lead to allow for unauthenticated remote code execution with root privileges

Published Thursday 18 December 2025 (01:27) (updated 16 January 2026)

Ongoing Exploitation Campaign affecting Cisco Secure Email Gateway And Cisco Secure Email and Web Manager

CVE-2025-20393 could allow an attacker to execute arbitrary code with root privileges

Published Thursday 18 December 2025 (01:19) (updated 18 December 2025)

Remote Code Execution Vulnerability Affecting Apache Commons Text

Security update addresses a critical severity vulnerability in the Apache Commons Text library that could lead to remote code execution in Claris FileMaker Server