Recent Posts

Week 23 – Exchange Servers at Risk: Active Exploitation

01 – 07 June 2026 A newly discovered vulnerability in Microsoft Exchange is currently being actively exploited by attackers. The issue, identified as CVE-2026-42897, this week’s CVE of the Week, affects the Outlook Web Access (OWA) component and is caused by improper input validation, leading 

Please welcome our newest member from Canada, Tania Tanic 

Please welcome our newest member from Canada, Tania Tanic 

Tania Tanic is a senior executive in cybersecurity, artificial intelligence innovation, governance and digital transformation, with more than 27 years of experience in major Canadian and international organizations, particularly in financial services, public investment, technology and consulting. A CPA and certified corporate director, she holds 

Week 22 – Click here to fix!

25 – 31 May 2026 CVE-2026-26980 is a critical SQL Injection vulnerability affecting Ghost CMS, a popular Node.js-based content management platform. In this week’s CVE of the Week we’ll be looking at CVE-2026-26980 critical vulnerability with a CVSS score of 9.4. The flaw allows unauthenticated 

Please welcome our newest member from France, Issa Diarra

Please welcome our newest member from France, Issa Diarra

Issa Diarra is a Cybersecurity Engineer and Splunk Expert with more than 10 years of experience in IT, including 5 years dedicated to SOC operations, SIEM engineering, cyber threat detection, and incident response. His expertise spans hybrid cloud security, threat hunting, detection engineering, and security 

Harm as Infrastructure: The Systems That Depend on What We Say We Want to Remove

Harm as Infrastructure: The Systems That Depend on What We Say We Want to Remove

A thought I can’t quite shake I’ve been thinking about poker machines lately, which is not a sentence I expected to write. Not because gambling is new, and not because Australians haven’t been arguing about pokies for decades. What’s been sitting with me is something 

Week 21 – Cisco SD-WAN: Peers Only… Or Not

Cisco Catalyst SD-WAN Controller has maximum severity flaw, attacker could log in as internal, high-prilvileged. non-root user.

Cyber (In)Securities – Issue 202

Cyber (In)Securities – Issue 202

You can download this edition by clicking the three dots icon on the far right and selecting Download PDF File. For the best reading experience, we recommend enlarging it by clicking the fullscreen icon, which is the third icon from the right. All article titles 

From Compliance to Cyber Resilience: Why Dubai’s DigitalFuture Needs Strong Governance, Cloud Security, and RiskManagement By Aman Dev Sumakumar

You can download this edition by clicking the three dots icon on the far right and selecting Download PDF File. For the best reading experience, we recommend enlarging it by clicking the fullscreen icon, which is the third icon from the right. All article titles