https://www.csa.gov.sg/alerts-and-advisories/ Provides alerts and advisories on emerging cyber threats, vulnerabilities, and preventive measures to help individuals and organisations stay secure online. en Mon, 28 Sep 2026 11:20:55 +0800 Isomer (https://www.isomer.gov.sg) https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-129urn:isomer:resource:422064Attackers are exploiting multiple vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway. Patch immediately.Mon, 28 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-128urn:isomer:resource:421622Attackers are exploiting a high-severity vulnerability in WordPress to achieve remote code execution under specific conditions. Patch immediately.Thu, 24 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-127urn:isomer:resource:421509Attackers can exploit multiple vulnerabilities in Synology DiskStation Manager (DSM) to read or write arbitrary files and conduct denial-of-service attacks. Patch immediately.Wed, 23 Sep 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/a259e87d-9ca9-4c2a-bddc-21b56b17cbb6/Security%20Bulletin%2023%20Sep%202026%20[PDF,%202.6MB].pdfurn:isomer:resource:421494Wed, 23 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-126urn:isomer:resource:421060Attackers are exploiting a critical vulnerability in Cisco Identity Services Engine and Cisco Identity Services Engine Passive Identity Connector to bypass authentication and gain unauthorised access. Patch immediately.Mon, 21 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-125urn:isomer:resource:420785Attackers are exploiting a critical vulnerability in Cisco AsyncOS to execute arbitrary commands with root privileges. Patch immediately.Fri, 18 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-124urn:isomer:resource:420630Attackers are exploiting a high severity vulnerability in Vite development servers to retrieve restricted system and configuration files over HTTP. Patch immediately.Thu, 17 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-123urn:isomer:resource:420565Attackers are exploiting a critical vulnerability in GitLab to read arbitrary files from the server. Patch immediately.Thu, 17 Sep 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/02c86c94-f006-4a82-8151-e863a043afb3/16_Sep_2026.pdfurn:isomer:resource:407184Wed, 16 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-122urn:isomer:resource:407073Attackers can exploit a high-severity vulnerability in MongoDB Server to gain full unauthenticated administrative access to the affected database. Patch promptly.Tue, 15 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-121urn:isomer:resource:406725Attackers can exploit critical vulnerabilities in Check Point Quantum Security Gateway and Security Management Server to perform remote code execution without authentication. Patch immediately.Mon, 14 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-120urn:isomer:resource:405927Attackers can exploit a high-severity vulnerability in PostgreSQL to execute arbitrary code on the affected system. Patch promptly.Wed, 09 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-119urn:isomer:resource:405925Attackers can exploit multiple vulnerabilities in SAP Products to execute arbitrary commands, obtain sensitive credentials, replace or delete tenant data and perform unauthorised actions. Patch immediately.Wed, 09 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-117urn:isomer:resource:405916Attackers are exploiting a critical vulnerability in Adobe Commerce, Adobe Commerce B2B and Adobe Magento to execute arbitrary code. Patch immediately.Wed, 09 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-118urn:isomer:resource:405915Attackers are exploiting a critical vulnerability in N-Able N-Central remote management and monitoring tool to execute code remotely without authentication. Patch immediately.Wed, 09 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-116urn:isomer:resource:405742Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 09 Sep 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/7d2fd6b6-b470-41a0-92e2-58711dc26631/Security%20Bulletin%2009%20Sep%202026%20[PDF,%202051KB].pdfurn:isomer:resource:405739Wed, 09 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-115urn:isomer:resource:405286Attackers are exploiting a critical vulnerability in NetScaler ADC and NetScaler Gateway. Patch immediately.Mon, 07 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-114urn:isomer:resource:404776Attackers are exploiting vulnerabilities in SonicWall SMA1000 Series appliances to gain unauthorised access to sensitive functionalities and execute arbitrary operating system (OS) commands.Fri, 04 Sep 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/b86641b8-35f2-4851-95b2-e8e6d9cb879e/02_Sep_2026.pdfurn:isomer:resource:404104Wed, 02 Sep 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-113urn:isomer:resource:403311Attackers are exploiting multiple vulnerabilities in Microsoft SharePoint Server to bypass a security feature and run code over a network. Patch immediately.Fri, 28 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-112urn:isomer:resource:402990Attackers can exploit a critical vulnerability in Apache Tomcat to bypass security constraints and gain unauthorised access to protected resources. Patch immediately.Thu, 27 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-011urn:isomer:resource:402216Passwords have been the primary method of authentication for decades, but they remain a common target for threat actors. It's time to rethink how we verify identities online.Wed, 26 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-111urn:isomer:resource:402298Attackers are exploiting a critical vulnerability in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-In to access, change or delete critical data. Patch immediately.Wed, 26 Aug 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/1d62f15d-3770-4555-ad1f-c1d42b94eab1/26_Aug_2026%20SB.pdfurn:isomer:resource:402204Wed, 26 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-110urn:isomer:resource:402278Two vulnerabilities have been discovered in the privileged access management application “Admin By Request” (ABR). The product owner has rolled out fixes for both reported vulnerabilities. Special thanks to the researchers and ABR for coordinating through CSA's Responsible Vulnerability Disclosure Policy.Wed, 26 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-109urn:isomer:resource:401331Attackers can exploit a high-severity vulnerability in Zimbra Collaboration Suite to achieve remote code execution. Patch immediately. Fri, 21 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-108urn:isomer:resource:394142Attackers can exploit multiple vulnerabilities in Zoom products to perform remote code execution, denial of service or disclose sensitive information. Users and administrators of affected products are advised to apply the latest security updates promptly.Thu, 20 Aug 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/afd41185-d7e8-4102-b7a5-226d910d51e5/19_Aug_2026.pdfurn:isomer:resource:393962Wed, 19 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-107urn:isomer:resource:393804Attackers can exploit multiple vulnerabilities in HPE Aruba Networking Private 5G Core affecting third-party components Traefik and Grafana to spoof identities and escalate privileges. Patch promptly.Tue, 18 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-106urn:isomer:resource:393801Attackers are exploiting a vulnerability in Cisco Secure Firewall ASA and FTD to cause the affected device to reload unexpectedly, resulting in a denial of service condition. Patch immediately.Tue, 18 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-105urn:isomer:resource:393799Attackers can exploit multiple vulnerabilities in Fortinet FortiWeb, FortiClient Windows, FortiManager, and FortiManager Cloud to bypass authentication, gain unauthorised access or execute arbitrary code. Patch promptly.Tue, 18 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-104urn:isomer:resource:393797Attackers can exploit multiple vulnerabilities in SAP products to execute arbitrary code, disclose sensitive information or crash affected systems. Patch immediately.Tue, 18 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-010urn:isomer:resource:393144The Singapore Police Force (SPF) and Cyber Security Agency of Singapore (CSA) would like to alert members of the public and businesses of a cryptocurrency-related scam involving fake job offers and the compromise of software systems.Fri, 14 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-103urn:isomer:resource:392093Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 12 Aug 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/bb4189ab-cc87-44b7-8141-f7985aead9a1/12_Aug_2026.pdfurn:isomer:resource:392092Wed, 12 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-102urn:isomer:resource:390568Attackers can exploit a missing encryption vulnerability in Apache Tomcat to bypass the EncryptInterceptor, potentially exposing sensitive data transmitted between cluster nodes. Patch immediately.Fri, 07 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-101urn:isomer:resource:390567Multiple vulnerabilities have been identified in Cisco IOS XE Software that could allow attackers to execute arbitrary commands, bypass security controls, gain unauthorised access, disclose sensitive information, or affect the operation of vulnerable systems. Patch immediately.Fri, 07 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-100urn:isomer:resource:390530Attackers can exploit multiple vulnerabilities in Cisco Catalyst SD-WAN Software to bypass security controls, gain unauthorised access, access or manipulate files, and disclose sensitive information. Patch immediately.Fri, 07 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098urn:isomer:resource:389561Multiple vulnerabilities have been discovered in CatchPulse. SecureAge, the product owner, has rolled out fixes for all reported vulnerabilities. Special thanks to the informer and SecureAge for coordinating through CSA's Responsible Vulnerability Disclosure Policy.Thu, 06 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-099urn:isomer:resource:389921Attackers are actively exploiting a critical vulnerability in IBM Langflow OSS to achieve unauthenticated remote code execution (RCE). Users and administrators of affected products are advised to apply the latest security updates immediately. Thu, 06 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-009urn:isomer:resource:389913Security researchers have identified an active software supply chain attack involving malicious versions of Keyv and related npm packages. The Shai-Hulud malware steals developer credentials and spreads by compromising additional packages. Organisations using Node.js should immediately review their dependencies and treat credentials on affected systems as potentially compromised.Thu, 06 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-097urn:isomer:resource:388886Authenticated attackers can exploit a critical vulnerability in cPanel & WHM to gain database root privileges and potentially compromise other customers hosted on the same server. Patch immediately.Wed, 05 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-096urn:isomer:resource:388798Attackers can exploit multiple vulnerabilities in VMware products to bypass authentication, execute arbitrary code, access sensitive information or cause denial-of-service. Patch immediately.Wed, 05 Aug 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/584978ef-a8ab-45c3-8bc2-42786973fb82/05_Aug_2026.pdfurn:isomer:resource:388799Wed, 05 Aug 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-095urn:isomer:resource:386957Attackers are exploiting a medium-severity vulnerability in Cisco Secure Firewall Management Center to log in and access sensitive data. Patch immediately.Fri, 31 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094urn:isomer:resource:383197Multiple vulnerabilities have been discovered in Koollab's Learning Management System (LMS). Three Learning, the product owner, has rolled out fixes for all reported vulnerabilities across all cloud-hosted instances of the LMS. Special thanks to the researchers from Centre for Strategic Infocomm Technologies (CSIT) and Three Learning for coordinating through CSA's Responsible Vulnerability Disclosure Policy.Wed, 29 Jul 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/4bfb167c-55f2-48d1-a75c-9674305c5bbf/29_Jul_2026.pdfurn:isomer:resource:383259Wed, 29 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-008urn:isomer:resource:368373The Cyber Security Agency of Singapore and Infocomm Media Development Authority have issued a joint advisory to guide individuals on the safe and secure use of generative AI tools.Tue, 28 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-093urn:isomer:resource:370176A vulnerability has been discovered in EShare’s application. Special thanks to the informer and EShare for their involvement as part of CSA's Responsible Vulnerability Disclosure Policy.Tue, 28 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-092urn:isomer:resource:367887Attackers are exploiting a critical severity vulnerability in Langflow to execute arbitrary code. Users and administrators of affected products are advised to apply the latest security updates immediately.Fri, 24 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-091urn:isomer:resource:367609Attackers can exploit two critical vulnerabilities in SolarWinds Serv-U to perform remote code execution. Patch immediately.Thu, 23 Jul 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/35b2d4ed-a024-4703-be71-245c06f0a573/22_Jul_2026.pdfurn:isomer:resource:367118Wed, 22 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-090urn:isomer:resource:351126Attackers can exploit a critical-severity vulnerability in Zoom to conduct an account takeover via network access. Users and administrators of affected products are advised to apply the latest security updates immediatelyThu, 16 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-087urn:isomer:resource:349759Attackers can exploit critical vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud to gain unauthorised access, modify data and cause denial of service to affected systems. Patch immediately.Wed, 15 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-089urn:isomer:resource:349787Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 15 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-088urn:isomer:resource:349773Attackers are exploiting two zero-day vulnerabilities in the SMA1000 series appliances to perform server-side request forgery and execute arbitrary operating system commands. Patch immediately.Wed, 15 Jul 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/9672ada9-1242-46c3-a4f0-73a7173afcba/15-July-2026.pdfurn:isomer:resource:349725Wed, 15 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-086urn:isomer:resource:347234CSA has issued a CVE ID to a vulnerability reported in WinFsp as part of CSA’s Responsible Vulnerability Disclosure Policy. Users and administrators of the affected product versions are advised to update to the latest version immediately. Mon, 13 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-085urn:isomer:resource:346931Attackers are exploiting critical vulnerabilities in Joomla's SP Page Builder and Page Builder CK extensions to upload malicious files and execute arbitrary code. Patch immediately.Fri, 10 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-084urn:isomer:resource:346729Attackers can exploit multiple vulnerabilities in BeyondTrust's Remote Support and Privileged Remote Access products to bypass access controls and gain unauthorised access, cause a denial of service, or access unintended resources. Patch immediately.Thu, 09 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-083urn:isomer:resource:346656Attackers are exploiting a critical vulnerability in Gitea Docker images to gain unauthorised access to Gitea instances. Patch immediately.Wed, 08 Jul 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/bf4b1259-bde5-468c-9013-5ae08e441abe/08_Jul_2026.pdfurn:isomer:resource:346368Wed, 08 Jul 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-082urn:isomer:resource:342848Attackers can exploit multiple vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway to read arbitrary files, trigger denial-of-service conditions, and disclose sensitive memory contents. Patch immediately.Thu, 02 Jul 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/5d5ee95a-41e6-4c77-b9f8-84250ce39e0f/01_Jul_2026.pdfurn:isomer:resource:342608Wed, 01 Jul 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/bc7af69f-20ec-46a8-a5a2-f8fc4e6fa413/24_Jun_2026.pdfurn:isomer:resource:321324Wed, 24 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-007urn:isomer:resource:308058A threat actor has leaked credentials of over 70,000 FortiGate devices worldwide, making them vulnerable to network intrusions. Check access control configurations of FortiGate devices immediately.Mon, 22 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-080urn:isomer:resource:307732Attackers can exploit high-severity vulnerabilities in NGINX to cause worker process crashes and, under certain conditions, achieve remote code execution. Patch immediately.Fri, 19 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-081urn:isomer:resource:307755Attackers can exploit multiple vulnerabilities in Cisco Identity Services Engine to execute arbitrary commands on the underlying operating system and disclose sensitive information. Patch immediately.Fri, 19 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-079urn:isomer:resource:307706Attackers can exploit multiple vulnerabilities in Oracle Solaris to compromise affected systems, gain unauthorised access to critical data and cause denial of service. Patch immediately.Thu, 18 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-078urn:isomer:resource:307425Attackers can exploit critical vulnerabilities in MariaDB Community Server to execute arbitrary shell commands on the affected system. Patch immediately.Wed, 17 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-076urn:isomer:resource:306674Attackers can exploit multiple high-severity vulnerabilities in GitLab to achieve account takeover, cause denial of service, add unauthorised email addresses and execute arbitrary client-side code. Patch immediately.Tue, 16 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-077urn:isomer:resource:306787Attackers are exploiting a vulnerability in Cisco Catalyst SD-WAN Manager to overwrite files on the underlying filesystem and escalate privileges to root. Patch immediately.Tue, 16 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-074urn:isomer:resource:305818Attackers can exploit OS command injection (CVE-2026-10520) and authentication bypass (CVE-2026-10523) vulnerabilities in Ivanti Sentry to execute commands as root, create unauthorised administrative accounts, and gain full system administrative control without authentication. Patch immediately.Fri, 12 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-075urn:isomer:resource:305820Attackers can exploit critical vulnerabilities in SAP NetWeaver and SAP Commerce Cloud to gain unauthorised access and compromise affected systems. Users and administrators are advised to patch immediately.Fri, 12 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-073urn:isomer:resource:305817Attackers can exploit a critical vulnerability in Fortinet FortiSandbox via HTTP requests to execute unauthorised commands on the affected system. Patch immediately. Fri, 12 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-072urn:isomer:resource:305814Oracle has released security updates to address a critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools that could allow unauthenticated attackers to perform remote code execution and fully compromise the affected system. Patch immediately.Fri, 12 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-006urn:isomer:resource:291570The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) would like to alert members of the public to remain vigilant against technical support scams involving impersonation of Microsoft.Wed, 10 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-071urn:isomer:resource:291576Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 10 Jun 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/7ce84793-b6e6-4a67-931d-0316234c334e/10-June-2026.pdfurn:isomer:resource:291512Wed, 10 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-070urn:isomer:resource:289550Attackers are actively exploiting a critical vulnerability in Check Point VPN to bypass authentication and gain unauthorised remote access. Apply security updates immediately.Tue, 09 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-069urn:isomer:resource:283995Attackers are exploiting a vulnerability in SolarWinds Serv-U to crash the file transfer service without authentication, causing a denial of service condition. Patch immediately.Tue, 09 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-067urn:isomer:resource:270374Cisco released security updates to fix a critical vulnerability in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition. Attackers can gain root privileges by exploiting the vulnerabilities. Users of affected products are advised to update to the latest versions immediately.Fri, 05 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-066urn:isomer:resource:270372Mirasvit released a security update addressing a critical vulnerability in the Full Page Cache Warmer extension for Magento 2. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 05 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-068urn:isomer:resource:270394Attackers are exploiting a 2022 vulnerability in the Linux kernel to escalate privileges and escape containerised environments to compromise underlying hosts. Patch immediately.Fri, 05 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-065urn:isomer:resource:269973Oracle has released security updates to address multiple vulnerabilities across several Oracle products that could allow unauthenticated attackers to compromise and take over affected systems. Users and administrators of affected products are advised to update to the latest versions immediately.Wed, 03 Jun 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/273c0862-63ee-4266-8ffb-ae39b3bd4b6d/03_Jun_2026.pdfurn:isomer:resource:269794Wed, 03 Jun 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-064urn:isomer:resource:264511Palo Alto Networks has identified a critical vulnerability affecting the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS software and Prisma Access that allows attackers to establish unauthorised VPN connections. Users and administrators of affected product versions are advised to update to the latest versions immediately. Sun, 31 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-062urn:isomer:resource:264367A critical vulnerability in Langflow discovered in December 2025 is now under active exploitation. Users and administrators are advised to update to the latest version immediately. Fri, 29 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-063urn:isomer:resource:264368Microsoft has released security updates addressing a remote code execution vulnerability in SharePoint. Users and administrators of affected products are advised to update to the latest versions immediately. Fri, 29 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-005urn:isomer:resource:264188Autonomous AI agents, such as OpenClaw, offer real productivity benefits but introduce serious cybersecurity risks. This advisory draws attention to IMDA's Case Study on the Responsible Deployment of OpenClaw, and highlights the key cybersecurity risks.Thu, 28 May 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/2bb9182e-5f7e-4c4c-8d5f-fcb8541c66db/27_May_2026.pdfurn:isomer:resource:264142Wed, 27 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-060urn:isomer:resource:263934Drupal security team has released a security update to address a critical Structured Query Language (SQL) Injection vulnerability in Drupal core affecting multiple supported branches. Users and administrators of affected versions are advised to update to the latest patched versions immediately.Tue, 26 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-061urn:isomer:resource:263935LiteSpeed Technologies has released security updates addressing an Incorrect Privilege Assignment vulnerability in the LiteSpeed User-End cPanel Plugin. Users and administrators of affected versions are advised to update to the latest version immediately. Tue, 26 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-059urn:isomer:resource:263923Ubiquiti has released security updates to address multiple critical vulnerabilities in UniFi OS. Users and administrators of affected products are advised to update to the latest versions immediately.Tue, 26 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-058urn:isomer:resource:263371Cisco has released security updates addressing multiple vulnerabilities affecting multiple Cisco products. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 22 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-057urn:isomer:resource:263277n8n has released security updates to address multiple vulnerabilities in n8n open-source workflow automation platform. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 22 May 2026 00:00:00 +0800 https://isomer-user-content.by.gov.sg/36/a5531b14-3ea9-47db-9653-2d247a9f9d54/20_May_2026.pdfurn:isomer:resource:259934Wed, 20 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-056urn:isomer:resource:253415F5 has released security updates to address multiple vulnerabilities in NGINX, BIG-IP, and BIG-IQ. Users and administrators of affected products are advised to update to the latest versions immediately.Mon, 18 May 2026 00:00:00 +0800 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-055urn:isomer:resource:252857Cisco has released security updates to address a critical vulnerability in Cisco Catalyst SD-WAN Controller. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 15 May 2026 00:00:00 +0800