Threats & Vulnerabilities
The latest critical vulnerabilities, ransomware campaigns and breaches, explained in plain English with what to patch and what to check.
Actively Exploited Vulnerabilities: What to Patch Now (November 2026)
Critical vulnerabilities attackers are exploiting now: PHP2Shell, Citrix NetScaler, Ivanti, OpenSSH SSHole, PAN-OS, Cisco, Outlook, Chrome and SonicWall, with fixes.
· 8 min read
Threats & VulnerabilitiesPHP2Shell (CVE-2026-109618 and CVE-2026-109619): What It Is and How to Fix It
PHP2Shell is a pair of PHP remote code execution flaws exploited in the wild since October 2026. Who is affected, the fixed PHP versions and how to check for compromise.
· 6 min read
Threats & VulnerabilitiesRansomware News: Record Attacks, New Groups and Big Breaches (Autumn 2026)
Ransomware hit record levels in Q3 and October 2026. The biggest attacks and breaches, the most active groups, how attackers got in and what to do about it.
· 7 min read
Threats & VulnerabilitiesReact2Shell (CVE-2025-55182): The React and Next.js Flaw Explained
React2Shell (CVE-2025-55182) is a CVSS 10.0 React Server Components flaw that hit Next.js apps. Affected and safe versions, follow-up CVEs and how to check your apps.
· 7 min read
Threats & VulnerabilitiesSSHole (CVE-2026-123158): The OpenSSH Bypass Explained and How to Fix It
SSHole (CVE-2026-123158) lets attackers bypass OpenSSH password authentication on musl-based Linux such as Alpine. Who is affected, how it is exploited and how to fix it.
· 5 min read
Threats & VulnerabilitiesWhat Is a Zero-Day Vulnerability? Zero-Day Attacks Explained
What is a zero-day vulnerability? How zero-day exploits and attacks work, zero-day vs n-day, why VPNs and firewalls get hit, and how to reduce your risk.
· 5 min read
Threats & VulnerabilitiesWhat Is Dark Web Monitoring? And Is It Worth It for a Business?
What dark web monitoring is, what it finds (leaked passwords, customer data, network access for sale) and when it is worth paying for as a business.
· 6 min read