Short, practical write-ups of the vulnerabilities and vendor issues we are checking for our clients each week: what is affected, whether it is being exploited, and what to look at in your own office.
Brotli flaw now exploited with emergency .NET updates, a UEFI network boot bug in server firmware, and Windows dropping eMudhra certificates. What to check.
Read the postConnectWise Cloud Backup access abused in Microsoft 365, October Windows updates destabilizing Exchange, and an exploited BeyondTrust bug. What to check.
Read the postExploited bugs in Cisco Secure Email Gateway, AhsayCBS backup servers, and Palo Alto PAN-OS. What each affects and what to check this week.
Read the postA Windows Shell zero-day, five Outlook Reading Pane bugs, and an exploited Ivanti VPN flaw. What each one affects and what to check this week.
Read the postA new critical NetScaler bug, a CISA warning on mailbox password spraying and hidden VPN apps, and Windows Update certificates that expire in 2027.
Read the postFBI warns FortiBleed is locking owners out of Fortinet firewalls. Plus a critical SonicWall SMA1000 hotfix and Outlook blocking .msix files in November.
Read the postUpdate Ninja Forms to 3.15.5 and check for hidden admins, protect your domain after Google's certificate hijack report, and patch Atlassian Data Center.
Read the postFortiMail now has fixes for exploited CVE-2026-104286, Dell System Update needs 2.3.0.0, and a Windows Secure Boot certificate expires October 19.
Read the postUpgrade SAML NetScaler gateways again for exploited CVE-2026-88779, update Chrome and Edge 154, and check KB5124010 if older apps crash on audio.
Read the postLock down FortiMail for exploited CVE-2026-104286, update self-hosted Zammad to 7.2.0, and set Windows 11 26H2's new settings backup default on purpose.
Read the postPatch exploited NetScaler CVE-2026-88771/88772, block Microsoft 365 device code phishing after EvilTokens, and check SharePoint CVE-2026-65660.
Read the postPatch F5 APM if it issues OAuth tokens, install Check Point Jumbo (LivePatch 28/29 is not enough), and fix the Windows 11 black screen after sign-in with Microsoft's KIR.
Read the postConfirm Windows File History still backs up after September updates, patch exploited Zyxel GS1900 switches for CVE-2026-7273, and check Defender 4.18.26080.4.
Read the postPatch Cisco Secure Email Gateway for CVE-2026-76461, install the Sept 14 RDS out-of-band update, and treat vCenter CVE-2026-59310 as ransomware-priority.
Read the postRefresh ScreenConnect clients to 26.6.5 after CVE-2026-84869, confirm Check Point VPN LivePatch for CVE-2026-85102, and patch MikroTik RouterOS against MikroTrick.
Read the postInstall September's Windows KEV patches and KB5124008, confirm FortiOS firmware against CVE-2025-25249, and move Chrome to 153 for CVE-2026-87491.
Read the postUpdate Chrome and Edge for CVE-2026-85046, check leftover hybrid Exchange before mail throttling, and treat Entra passkey prompts as a real rollout.
Read the postInventory UniFi versions, leftover SharePoint Server, and SQL Server builds against this week's UniFi bulletin, SharePoint probing, and CISA KEV add.
Read the postOur Sussex, WI team supports businesses across Milwaukee and Southeast Wisconsin. Call us or send a note and we will tell you what actually needs attention.
