THREAT WATCH

Medium Fortinet FortiOS: CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Critical Arista VeloCloud Orchestrator: CVE-2026-16812 — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Actively Exploited Check Point SmartConsole: CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability Critical Microsoft SharePoint: CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Medium WordPress Core: CVE-2026-60137 — WordPress Core SQL Injection Vulnerability Critical WordPress Core: CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability Critical Langflow Langflow: CVE-2026-0770 — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability High DD-WRT DD-WRT: CVE-2021-27137 — DD-WRT Stack-Based Buffer Overflow Vulnerability Medium Fortinet FortiOS: CVE-2025-68686 — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Critical Arista VeloCloud Orchestrator: CVE-2026-16812 — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Actively Exploited Check Point SmartConsole: CVE-2026-16232 — Check Point SmartConsole Improper Authentication Vulnerability Critical Microsoft SharePoint: CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Medium WordPress Core: CVE-2026-60137 — WordPress Core SQL Injection Vulnerability Critical WordPress Core: CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability Critical Langflow Langflow: CVE-2026-0770 — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability High DD-WRT DD-WRT: CVE-2021-27137 — DD-WRT Stack-Based Buffer Overflow Vulnerability

Tag: data-breach

21 Jul
2026

EY Data Breach: What Was Exposed and What to Do

Governance, Risk & Compliance

Ernst & Young (EY), one of the Big Four accounting and advisory firms, is notifying clients of a data breach after an unauthorised party accessed a third-party IT support platform its staff use and downloaded documents. The breach centres not on EY’s audit systems but on a support-ticket tool, where client tax documents had been […]

► Necessary Cookies Always Active

Necessary cookies enable essential site features like secure log-ins and consent preference adjustments. They do not store personal data.

► Functional Cookies Remark

Functional cookies support features like content sharing on social media, collecting feedback, and enabling third-party tools.

► Analytical Cookies Remark

Analytical cookies track visitor interactions, providing insights on metrics like visitor count, bounce rate, and traffic sources.

► Advertisement Cookies Remark

Advertisement cookies deliver personalized ads based on your previous visits and analyze the effectiveness of ad campaigns.