A security flaw has been found in Metabase, a data analysis tool many websites use to view and report on stored information. This is a SQL injection vulnerability, which means an unauthenticated remote attacker (someone without a login to your system, accessing it from anywhere on the internet) can send harmful, unauthorized code directly to the ...
Continue reading
A security flaw has been identified in the Windows Ancillary Function Driver for WinSock, a core Windows component that manages networking functionality for Windows servers and devices. This is a type of memory error called a use-after-free vulnerability, which occurs when a system tries to access a section of memory that has already been freed up ...
Continue reading
A security vulnerability has been identified in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) systems. The flaw is a heap inspection issue that could be exploited by an unauthenticated, remote attacker — meaning someone without valid login credentials for the device — to force the firewall to ...
Continue reading
On July 20, 2026, cybersecurity authority MyCERT released advisory MA-1471.072026 addressing new reported exploitation of Microsoft SharePoint, a platform widely used for team collaboration and document sharing.
Microsoft SharePoint is a common tool many organizations rely on to store work files, collaborate on projects, and host internal team ...
Continue reading
