A VPN Company Got Breached Through Its Own Test Server, and It Is a Warning for Every Security Vendor in Africa Surfshark, one of the world’s biggest consumer VPN brands, disclosed this week that attackers accessed an internal test server that a configuration error had made reachable from the public internet. The company says customer…
A CVSS 10.0 hole in Cisco’s firewall manager is being exploited, and this time there is no “no evidence” line in the advisory Cisco confirmed this week that CVE-2026-20079, an authentication bypass in Cisco Secure Firewall Management Center (FMC), is under active exploitation. The score is the ugliest one in the book: CVSS 10.0. An…
A CVSS 10 hole in the SAP kernel lets an unauthenticated attacker own the system before the first authorization check ever runs. Patch Tuesday just moved from IT chore to board-level emergency. SAP’s September security patch day landed on Tuesday (Sept 8) with 20 new and updated notes. One of them, CVE-2026-44756, carries the maximum…
A Polish CERT researcher found the bug with an AI model’s help, and within days attackers were using it against internet-exposed MikroTik routers. If your branch office runs on one, patch this week. MikroTik gear is the quiet backbone of a lot of African networks. Internet service providers in Johannesburg, retail chains with fifty branches…
Your phone system is now a remote-code-execution target, and attackers already know it A critical flaw in Sangoma Switchvox, the management software behind a lot of enterprise VoIP deployments, is under active exploitation. CVE-2026-9586 carries a CVSS score of 9.3. It is an unauthenticated SQL injection, so the attacker does not need credentials or a…
5,400 hacked websites are delivering malware that lives on a blockchain, and the host list is full of ordinary small-business WordPress shops A malware operation that Netskope researchers have tracked for months runs on one mean idea: why rent servers when you can store your payload on a public blockchain and let it outlive every…
Passkeys were supposed to end the credential fight. A running inventory of 39 documented attack methods says the fight just moved somewhere most enterprises are not watching. If your security roadmap leans on passkeys, the news this week is not the doom you might expect. It is stranger. There are now at least 39 publicly…
A patched upload bug in Elementor Pro is now a live webshell delivery path, and the clock started the day the fix shipped CVE-2026-32475, a critical validation flaw in the Elementor Pro plugin for WordPress, is being exploited in the wild to drop webshells on business websites. The bug let attackers upload a PHP file…
A Critical JFrog Artifactory Flaw Is Letting Attackers Mint Their Own Admin Tokens A critical authentication bypass in JFrog Artifactory (CVE-2026-82329) is being exploited in the wild, and the attackers are using it to forge administrative access tokens on the artifact repositories that enterprise software delivery depends on. The flaw works in the default configuration…
Langflow’s code validator just became the newest way to lose your cloud keys An open-source RCE bug in Langflow sat unpatched for about seven months before anyone started hammering it. Now they are, hard. Threat actors are exploiting CVE-2026-0768, an unauthenticated remote code execution flaw in the custom component editor’s code validator, to walk onto…