eSecurityPlanet Staff

Ransomware groups exploit a GlobalProtect VPN vulnerability to reach enterprise systems. Here's what security teams should investigate.

PHP is preparing emergency fixes for two critical vulnerabilities as early attacks emerge. Here's what administrators should know about patching and mitigation.

Check Point detected more than 302,000 unique calendar-phishing emails targeting over 40,000 organizations, exposing risks in Microsoft 365 meeting workflows.

F5 patches five NGINX vulnerabilities, including three critical-rated memory flaws. Specific server configurations determine exposure and remediation needs.

ConnectWise contained compromised Cloud Backup app identities, but Microsoft 365 admins still need to check tenants for unauthorized changes and persistence.

SiteGuard Server Edition CVE-2026-106931 is under active exploitation. Administrators should preserve diagnostic evidence before patching because remediation may erase attack traces.

Attackers are targeting a critical Langflow RCE flaw despite available fixes. Security teams should verify patches, restrict MCP access, and check for compromise.

Weekly summary of Cybersecurity Insider newsletters

Citizen Lab confirms that zero-click spyware infected Al Jazeera devices through targeted ads. Its investigation also exposes Discover-Tech's global profiling and surveillance infrastructure.

Mozilla's Firefox 158 patches 77 security vulnerabilities, including sandbox escapes, privilege escalation, and memory-safety flaws. Here's what security teams need to know and which versions require updating.

Cisco Secure Email Gateway zero-day CVE-2026-76519 is under active attack. Learn which systems are vulnerable and how to patch and investigate compromise.

Weekly summary of Cybersecurity Insider newsletters