A security flaw has been identified in the on-premises version of Arista VeloCloud Orchestrator, a tool used to manage network and connected service operations. The flaw is an operating system command injection vulnerability, which allows a remote attacker to send specially crafted input to run unauthorized commands on the system that hosts the ...
Continue reading
A security vulnerability has been identified in Fortinet FortiOS, a network security platform used by some organizations. This flaw could allow a remote attacker to access sensitive information they are not authorized to view, even without valid login credentials for the system. The attacker would carry this out by sending specially crafted web ...
Continue reading
On July 20, 2026, Malaysia’s national cybersecurity agency (MyCERT) issued an advisory responding to new active exploitation attempts targeting Microsoft SharePoint, a popular platform many organizations use to host shared internal or public-facing website content.
When SharePoint servers are successfully exploited, attackers can gain ...
Continue reading
On July 22, 2026, MyCERT (Malaysia’s national cybersecurity emergency response team) released an advisory for a flaw in Microsoft Active Directory Federation Services, a common tool used to manage user logins and access permissions for connected websites, applications, and internal business systems. The vulnerability exists because the ...
Continue reading
