Announcements

Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability

  • 8th August 2026
A security vulnerability has been identified in Progress LoadMaster, a tool some websites use to balance traffic across servers to keep sites running reliably during high visitor volume. This flaw only affects users of this specific tool, and does not impact other common hosting services or software.The vulnerability allows unauthenticated ...
Continue reading

WordPress 7.0.3 release

  • 8th August 2026
A new version of WordPress, 7.0.3, has been released, and it includes several security fixes for the WordPress platform that powers many websites. Because this is a security-focused release, the WordPress team recommends updating any WordPress sites you operate as soon as possible to address these fixes. If you wish to update, you can do so either ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 8th August 2026
A security advisory has been published regarding Microsoft SharePoint, following reports of new active exploitations targeting the platform. Released on 20 July 2026, the advisory includes guidance for securing SharePoint deployments against these emerging threats. Hardening refers to adding extra security layers to a system to reduce the risk of ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 8th August 2026
On July 22, 2026, cybersecurity authority MyCERT released an advisory about a security flaw in Microsoft Active Directory Federation Services (ADFS), a tool many organizations use to manage single sign-on access for websites, apps, and internal work systems. The issue is that ADFS has insufficiently fine-grained access controls, meaning ...
Continue reading