Alerts & Advisories

Active Exploitation of Vulnerabilities in Microsoft SharePoint

Attackers are exploiting multiple vulnerabilities in Microsoft SharePoint Server to bypass a security feature and run code over a network. Patch immediately.

Critical Vulnerability in Apache Tomcat

Attackers can exploit a critical vulnerability in Apache Tomcat to bypass security constraints and gain unauthorised access to protected resources. Patch immediately.

Active Exploitation of Vulnerability in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-In

Attackers are exploiting a critical vulnerability in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-In to access, change or delete critical data. Patch immediately.

Vulnerabilities in Privileged Access Management Application “Admin By Request”

Two vulnerabilities have been discovered in the privileged access management application “Admin By Request” (ABR). The product owner has rolled out fixes for both reported vulnerabilities. Special thanks to the researchers and ABR for coordinating through CSA's Responsible Vulnerability Disclosure Policy.

Understanding Passwordless Authentication

Passwords have been the primary method of authentication for decades, but they remain a common target for threat actors. It's time to rethink how we verify identities online.

Security Bullentin 26 Aug 2026 [PDF, 2MB]

High-Severity Vulnerability in Zimbra Collaboration Suite

Attackers can exploit a high-severity vulnerability in Zimbra Collaboration Suite to achieve remote code execution. Patch immediately.

Multiple Vulnerabilities in Zoom Products

Attackers can exploit multiple vulnerabilities in Zoom products to perform remote code execution, denial of service or disclose sensitive information. Users and administrators of affected products are advised to apply the latest security updates promptly.

Security Bulletin 19 Aug 2026 [PDF, 2MB]

Multiple Vulnerabilities in HPE Aruba Networking Private 5G Core

Attackers can exploit multiple vulnerabilities in HPE Aruba Networking Private 5G Core affecting third-party components Traefik and Grafana to spoof identities and escalate privileges. Patch promptly.