Announcements

Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

  • 28th July 2026
A security vulnerability has been identified in Arista VeloCloud Orchestrator On-Prem, a tool used to manage virtual network infrastructure. The flaw is an operating system command injection bug, a type of security weakness that lets unauthorized users run restricted system commands.If exploited by a remote attacker, this vulnerability could allow ...
Continue reading

Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

  • 28th July 2026
A security flaw has been found in Fortinet FortiOS, a network security tool used by many organizations to protect their systems and websites. This issue could let an unauthorized person access sensitive information that should only be available to approved users. This flaw cannot be used to break into a system on its own. An attacker would first ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 28th July 2026
On 20 July 2026, Malaysia’s national cybersecurity agency MyCERT released a security advisory for Microsoft SharePoint, issued in response to new observed exploitation attempts targeting the platform. Microsoft SharePoint is a popular tool many businesses use to host internal team sites, share work documents, manage collaborative projects, and ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 28th July 2026
A new MyCERT security advisory for Microsoft Active Directory Federation Services (ADFS) was published on July 22, 2026. ADFS is a tool many organizations use to manage secure single sign-on and access rules for their websites, business applications and internal work systems. The advisory identifies a vulnerability caused by insufficiently ...
Continue reading