November 9, 2026
Published November 9, 2026 Summary A critical flaw in Google’s Brotli decompression library lets an attacker corrupt a server’s memory and potentially run code on it. […]
October 21, 2026
Published October 21, 2026 Summary Update PHP now. Two critical flaws in PHP itself, nicknamed “php2shell,” let an unauthenticated attacker run code on a web server […]
May 7, 2026
Anthropic’s Mythos Preview and Project Glasswing have redrawn the cyber threat landscape. This brief explains what changed, what it means for risk selection and pricing, and […]
December 10, 2025
Executive summary CVE-2025-55182 (“React2Shell”) is a CVSS 10.0 unauthenticated remote code execution vulnerability in React Server Components (RSC) that enables arbitrary code execution on affected servers […]
July 22, 2025
We are issuing an urgent alert regarding a critical and actively exploited vulnerability, identified as CVE-2025-53770, affecting on-premises Microsoft SharePoint Servers. Download Bulletin Why This Matters […]