I explain cybersecurity news, active attacks, privacy, surveillance technology, vulnerabilities, and OSINT in plain English, then give my independent analysis.
North AmericaEuropeMiddle EastEast AsiaOceaniaCurrent entries from CISA’s official Known Exploited Vulnerabilities catalog. These are confirmed weaknesses attackers have used, not simulated attack-map traffic.
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.Microsoft Windows Command Injection Vulnerability
Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.ISC BIND Data Processing Errors Vulnerability
ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.Apache Struts Command Injection Vulnerability
Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. This vulnerability can be chained with CVE-2023-22621 to achieve remote code execution.ONLYOFFICE Docs Server Path Traversal Vulnerability
ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.“Live” means the feed updates from current public reporting. It does not identify every attack or prove the physical location of an attacker.
Each section answers a different question. Start with the one that sounds most useful to you.
Read the daily blog for verified facts, technical context, and independent opinion.
BLOG & ANALYSIS 02Understand important security updates and which ones matter first.
PATCH TUESDAY 03Use trusted public tools to research threats, breaches, and exposure.
OSINT TOOLS 04Learn common cybersecurity terms without technical jargon.
LEARN CYBEROctober 13, 2026 · Critical Infrastructure
A large-scale cyberattack remotely altered connected refrigeration systems at hundreds of French stores, causing food losses and reported fires. Investigators have not identified the attacker or confirmed one exploit path across every affected location.
READ THE FULL POST & OPINION