Announcements

Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

  • 29th July 2026
A security vulnerability has been found in the Arista VeloCloud Orchestrator On-Prem, a tool some of our clients use to manage their hosted network and cloud infrastructure. This flaw is an operating system command injection issue, which means an unauthorized person accessing the system remotely could run unapproved, high-level commands on the ...
Continue reading

Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

  • 29th July 2026
A security vulnerability has been identified in Fortinet FortiOS, a network operating system used by some of our clients for their network infrastructure. This flaw poses a risk of sensitive system information being exposed to people who are not authorized to view it.An unauthenticated remote attacker could potentially bypass an existing patch for ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 29th July 2026
On July 20, 2026, cybersecurity agency MyCERT released a security advisory about Microsoft SharePoint, a common platform many businesses use to host shared document libraries, team collaboration spaces, and other content on their websites. The advisory was issued after new methods for exploiting unsecured SharePoint systems were discovered.The ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 29th July 2026
On July 22, 2026 at 1:26 pm, cybersecurity authority MyCERT released an advisory for a vulnerability in Microsoft Active Directory Federation Services (AD FS), a tool many businesses use to manage secure user sign-ins to web applications and internal systems. The issue stems from the service’s access controls lacking enough fine-grained, ...
Continue reading