Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Vulnerabilities

Sangoma Switchvox flaw exploited in attacks

Attackers are exploiting CVE-2026-9586, an unauthenticated SQL injection in Sangoma Switchvox, to deploy reverse shells. Patch to version 8.4.0.2.

1 min read 3 views Sep 02
Vulnerabilities

SonicWall SMA 1000 Zero-Days Exploited in Attacks

SonicWall patched two zero-day flaws in SMA 1000 VPN appliances, including a critical SSRF (CVE-2026-83548), exploited in attacks.

1 min read 3 views Sep 02
Vulnerabilities

WordPress backup plugin flaw exposes millions to takeover

CVE-2026-19949, a high-severity SQL injection in All-in-One WP Migration and Backup, allows unauthenticated attackers to execute code and take over si

1 min read 3 views Sep 02
Vulnerabilities

GeoNetwork Patches Unauthenticated RCE Chain

Two GeoNetwork vulnerabilities allow unauthenticated RCE, affecting government geoportals. Fixed in versions 4.4.12 and 4.2.17.

1 min read 3 views Sep 02
Vulnerabilities

Microsoft Defender blocks Google search links

Microsoft Defender for Office 365 is mistakenly flagging legitimate Google search URLs as malicious, showing unsafe-site warnings.

1 min read 2 views Sep 02
Vulnerabilities

Sangoma Switchvox SQLi Flaw Under Active Attack

Attackers are exploiting CVE-2026-9586, a patched SQL injection flaw in Sangoma Switchvox. Organizations should check for compromise immediately.

1 min read 2 views Sep 02
Vulnerabilities

Rockwell Patches Dozen Plus Flaws Across Products

Rockwell Automation released advisories fixing over a dozen vulnerabilities in RSLinx Classic, ArmorStart, ControlFLASH, and FactoryTalk products.

1 min read 3 views Sep 02
Vulnerabilities

Critical Switchvox Flaw Exploited for Unauthenticated RCE

Attackers exploit CVE-2026-9586, a critical SQL injection in Sangoma Switchvox, to deploy reverse shells without credentials.

1 min read 3 views Sep 02
Vulnerabilities

Exploit Published for Fresh Cleo Harmony Vulnerability

A new exploit targets a Cleo Harmony flaw, enabling remote attackers to bypass authentication via argument bearer manipulation.

1 min read 3 views Sep 02
Vulnerabilities

JFrog Artifactory Flaw Exploited for Admin Tokens

Attackers are exploiting CVE-2026-82329, a critical authentication bypass in JFrog Artifactory, to forge admin tokens and gain full control.

1 min read 3 views Sep 02
Vulnerabilities

Chrome Update Fixes Two Critical Use-After-Free Flaws

Google released a Chrome desktop update with 26 security fixes, including two critical use-after-free vulnerabilities that could be exploited on malic

1 min read 2 views Sep 02
Vulnerabilities

SonicWall SMA 1000 appliances under attack via zero-day flaws

Attackers are exploiting two previously undisclosed vulnerabilities (CVE-2026-83548, CVE-2026-83549) in SonicWall SMA 1000 appliances, the vendor confirmed on Tuesday. The vulnerabilities (CVE-2026-83548, CVE-2026-83549) The SonicWall SMA 1000 series is a lin

1 min read 2 views Sep 02

Want to learn more?

Start your free trial and see Phishlens in action.