Our Blog

CISA added nine new vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog during the past seven days, spanning enterprise collaboration platforms (Microsoft SharePoint), identity services (AD FS), sandboxing solutions (Fortinet FortiSandbox), access gateways (SonicWall SMA1000), financial ERP suites (Oracle E-Business Suite), and industrial automation protocols (KNX). The most significant operational trend is the concentrated targeting of remote access gateways, internal sandboxing infrastructure, and enterprise collaboration platforms for unauthenticated command injection, SSRF, and privilege escalation. Security, vulnerability management, and infrastructure teams should prioritize perimeter appliances, identity providers, and SharePoint environments for immediate validation and remediation activity.

Reading time 10 minutes

CISA added eight new vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog during the past seven days, spanning legacy Cisco infrastructure, multiple Joomla ecosystem extensions, Adobe ColdFusion, Langflow, and Microsoft SharePoint Server. The most significant operational trend is the concentration of unauthenticated file upload vulnerabilities affecting public-facing web applications, many of which provide immediate paths to web shell deployment and remote code execution. Security, vulnerability management, and infrastructure teams should prioritise internet-facing web applications and collaboration platforms for immediate exposure validation and remediation activity.

Reading time 10 minutes

Executive TL;DR:

CISA added one new vulnerability to the Known Exploited Vulnerabilities (KEV) Catalog during the past seven days: CVE-2026-45659, affecting Microsoft SharePoint Server. The addition confirms active exploitation and elevates patching from routine maintenance to an operational priority for organisations running on-premises SharePoint infrastructure. Security, vulnerability management and infrastructure teams should identify exposed SharePoint deployments immediately, validate patch status, and prioritise remediation ahead of routine patch cycles.

Reading time 15 minutes

The UK NCSC warns that an imminent AI-driven "patch wave" will completely overwhelm traditional security update pipelines. This guide breaks down the threat mechanics and delivers a practical playbook to help teams scale automation and deploy risk-based triage before exploit windows collapse.

Reading time 5 minutes