Announcements

Gitea Gitea: Gitea Code Injection Vulnerability

  • 26th August 2026
A security flaw has been identified in Gitea, a popular tool for hosting and managing code repositories that many of our clients use for development and website-related projects. This is a code injection vulnerability, which allows unauthorized code to be run on the platform without proper permission.To exploit this flaw, an attacker needs to ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 26th August 2026
MyCERT, Malaysia’s national cybersecurity agency, has published advisory MA-1471.072026 on July 20, 2026, after new methods to exploit the Microsoft SharePoint platform were discovered. The advisory outlines recommended hardening steps for SharePoint deployments to protect against these new threats.If you operate SharePoint instances as part of ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 26th August 2026
A security advisory was published on July 22, 2026, for a vulnerability found in Microsoft Active Directory Federation Services (ADFS), a tool many organizations use to manage who can access their websites and online applications. The flaw is classified as "insufficient granularity of access control," meaning the service may not properly restrict ...
Continue reading

MA-1473.072026: MyCERT Advisory - Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

  • 26th August 2026
On July 22, 2026, cybersecurity authority MyCERT released an advisory for a security flaw in Microsoft SharePoint Server. The vulnerability is a missing authentication issue for a critical function of the server software. This flaw means the affected critical function does not properly require users to verify they are authorized before accessing ...
Continue reading