THREAT WATCH
Actively Exploited Check Point SmartConsole: CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability Critical Microsoft SharePoint: CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Medium WordPress Core: CVE-2026-60137 — WordPress Core SQL Injection Vulnerability Critical WordPress Core: CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability Critical Langflow Langflow: CVE-2026-0770 — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability High DD-WRT DD-WRT: CVE-2021-27137 — DD-WRT Stack-Based Buffer Overflow Vulnerability Critical Fortinet FortiSandbox: CVE-2026-25089 — Fortinet FortiSandbox OS Command Injection Vulnerability Critical Fortinet FortiSandbox: CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection Vulnerability Actively Exploited Check Point SmartConsole: CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability Critical Microsoft SharePoint: CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Medium WordPress Core: CVE-2026-60137 — WordPress Core SQL Injection Vulnerability Critical WordPress Core: CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability Critical Langflow Langflow: CVE-2026-0770 — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability High DD-WRT DD-WRT: CVE-2021-27137 — DD-WRT Stack-Based Buffer Overflow Vulnerability Critical Fortinet FortiSandbox: CVE-2026-25089 — Fortinet FortiSandbox OS Command Injection Vulnerability Critical Fortinet FortiSandbox: CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection Vulnerability

Category: Incident Response

EY Data Breach: What Was Exposed and What to Do

Ernst & Young (EY), one of the “Big Four” accounting and advisory firms, has begun notifying clients of a data breach after an unauthorised party accessed a third-party IT support platform its staff use and downloaded documents. The EY data breach centres not on the firm’s audit systems but on a support-ticket tool — where […]

Read More