Canada’s Cyber Centre reports active exploitation of CVE-2026-65660 in on-premises SharePoint Server. Scope, checks and remediation steps.
Resources
Blog
Insights, field notes, and practical guidance on off-cloud security.
WSO2 CVE-2026-5430 added to KEV
Soclyde Team
CVE-2026-5430 bypasses JWT authentication in several WSO2 products. Affected versions, fixes and checks to run after its KEV listing.
Arista confirms exploitation of CVE-2026-93952 in VeloCloud Orchestrator On-Prem. Scope, fixes and the checks organisations should run.
Some Coder Registry traffic was redirected to a server delivering tampered Terraform modules designed to search for credentials.
F5 BIG-IP APM: an exploited code-execution flaw
Soclyde Team
CVE-2026-94127 affects specific BIG-IP APM OAuth configurations and is under active exploitation. Here are the priority checks.
The FBI is investigating the fbijobs.gov incident. Media report authenticated sample records and an internal memo addressing possible exfiltration, but the full scope remains unknown.
Canada’s Cyber Centre reports exploitation of CVE-2026-48842 in Roundcube Webmail. Here is what administrators should check after patching.
Critical cPanel flaw CVE-2026-67401
Soclyde Team
Rated 9.9/10, CVE-2026-67401 affects cPanel/WHM EmailTrack. Check your branch, install the fix and review server logs.
Cisco ISE CVE-2026-76460 flaw actively exploited
Soclyde Team
Cisco ISE CVE-2026-76460: affected releases 3.1–3.5, fixes by branch and checks to perform after active exploitation.
SAP Kernel and NetWeaver: two critical flaws
Soclyde Team
SAP’s September 8, 2026 Security Patch Day fixes two critical Kernel and NetWeaver vulnerabilities, including a CVSS 10.0 issue exploitable without authentication.
In 2026, HHS reached a HIPAA settlement with Ambry Genetics over a 2020 phishing incident that may have affected 225,370 people.
Check Point VPN flaw CVE-2026-85102 exploited
Soclyde Team
Check Point and the Dutch NCSC report exploitation of CVE-2026-85102. Learn which products are affected, how to patch and what logs to review.
Take the next step
Build a calmer password strategy
Have a question about off-cloud security or Soclyde? Let’s talk directly.