Alerts & Advisories
Provides alerts and advisories on emerging cyber threats, vulnerabilities, and preventive measures to help individuals and organisations stay secure online.
1263 items
20 October 2026
Advantech ADAM-3600 EdgeLink – Multiple Vulnerabilities including Remote Code Execution, Authentication Bypass, and Sensitive Data Exfiltration
Multiple vulnerabilities have been discovered in Advantech's ADAM-3600 EdgeLink remote terminal unit product. Advantech has released a security update to address these vulnerabilities. Special thanks to Advantech for coordinating the disclosure of these vulnerabilities with CSA.
20 October 2026
Critical Vulnerabilities in Next.js
Attackers can exploit critical vulnerabilities in Next.js to perform remote code execution. Patch immediately.
20 October 2026
Active Exploitation of Vulnerability in Ivanti Connect Secure
Attackers are exploiting a high-severity vulnerability in Ivanti Connect Secure to execute arbitrary commands. Patch immediately.
19 October 2026
Critical Vulnerabilities in Juniper Devices
Attackers can exploit critical vulnerabilities in Juniper devices to execute arbitrary code, cause a denial-of-service condition, or gain root-level privileges. Patch immediately.
16 October 2026
Multiple Vulnerabilities in MariaDB Server
Attackers can exploit high-severity vulnerabilities in MariaDB Server to execute arbitrary code on the affected system. Patch promptly.
16 October 2026
Critical Vulnerabilities in Splunk Enterprise
Attackers can exploit critical vulnerabilities in Splunk Enterprise to escalate privileges and execute arbitrary code. Patch immediately.
16 October 2026
Active Exploitation of Vulnerability in Palo Alto Networks Products
Attackers are exploiting a high-severity vulnerability in Palo Alto Networks PAN-OS to execute arbitrary code with root privileges. Patch immediately.
14 October 2026
October 2026 Monthly Patch
Microsoft has released security patches to address multiple vulnerabilities in their software and products.
14 October 2026
Critical Vulnerability in GitLab Community Edition and Enterprise Edition
Attackers can exploit a critical vulnerability in GitLab Community Edition and Enterprise Edition to perform remote code execution without authentication. Patch immediately.
14 October 2026