Announcements

Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

  • 29th July 2026
A security vulnerability has been discovered in Arista’s VeloCloud Orchestrator On-Prem product. This is an OS command injection flaw, which allows a remote attacker to send malicious commands to access restricted, privileged internal functions of the system and disrupt the host that runs the orchestrator.If this vulnerability is successfully ...
Continue reading

Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

  • 29th July 2026
A security flaw has been identified in Fortinet FortiOS, a network security operating system. This issue could allow an unauthorized person to access sensitive information stored on systems running the affected software.To exploit this vulnerability, an attacker would first need to already have broken into a system running FortiOS using a ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 29th July 2026
On 20 July 2026, cybersecurity agency MyCERT published a security advisory focused on Microsoft SharePoint, a common platform used by organizations to host shared team content, document libraries, and internal collaboration spaces. The advisory notes that new exploit methods targeting SharePoint have been identified in recent attack activity. It ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 29th July 2026
On 22 July 2026, cybersecurity agency MyCERT issued an advisory for a security vulnerability in Microsoft Active Directory Federation Services (AD FS). Many organizations use AD FS to let employees or students sign into multiple work or school apps and services with a single set of credentials, instead of needing a separate login for each ...
Continue reading