Alerts & Advisories

Active Exploitation of Vulnerability in Cisco Secure Firewall Management Center

ttackers are exploiting a medium-severity vulnerability in Cisco Secure Firewall Management Center to log in and access sensitive data. Patch immediately.

Koollab LMS - Multiple Vulnerabilities including Remote Code Execution, SQL Injection, and Authentication Bypass

Multiple vulnerabilities have been discovered in Koollab's Learning Management System (LMS). Three Learning, the product owner, has rolled out fixes for all reported vulnerabilities across all cloud-hosted instances of the LMS. Special thanks to the researchers from Centre for Strategic Infocomm Technologies (CSIT) and Three Learning for coordinating through CSA's Responsible Vulnerability Disclosure Policy.

Security Bulletin 29 Jul 2026 [PDF, 1.89 MB]

Joint Advisory by the Cyber Security Agency of Singapore and Infocomm Media Development Authority

The Cyber Security Agency of Singapore and Infocomm Media Development Authority have issued a joint advisory to guide individuals on the safe and secure use of generative AI tools.

Vulnerability in EShare Application

A vulnerability has been discovered in EShare’s application. Special thanks to the informer and EShare for their involvement as part of CSA's Responsible Vulnerability Disclosure Policy.

Critical Vulnerability in Langflow

Attackers are exploiting a critical severity vulnerability in Langflow to execute arbitrary code. Users and administrators of affected products are advised to apply the latest security updates immediately.

Multiple Critical Vulnerabilities in SolarWinds Serv-U

Attackers can exploit two critical vulnerabilities in SolarWinds Serv-U to perform remote code execution. Patch immediately.

Security Bulletin 22 Jul 2026 [PDF, 2.4MB]

Critical Vulnerability in Zoom Products

Attackers can exploit a critical-severity vulnerability in Zoom to conduct an account takeover via network access. Users and administrators of affected products are advised to apply the latest security updates immediately

Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud

Attackers can exploit critical vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud to gain unauthorised access, modify data and cause denial of service to affected systems. Patch immediately.