Vulnerabilities CISA just added three UniFi OS vulnerabilities to the Known Exploited Vulnerabilities catalog. The story is not only that Ubiquiti devices need patches. The bigger lesson is [...]

Ransomware The most prolific ransomware operation of 2026 didn’t need new malware to break into Check Point’s customers. It needed one logic flaw in a VPN protocol that [...]

Vulnerability CVE-2022-0492 was fixed four years ago. CISA just added it to the Known Exploited Vulnerabilities catalog with a June 5 deadline — because the container hosts it [...]

One RMM, 200 Victims: How DragonForce Scales Ransomware | ByteVanguard Ransomware DragonForce doesn’t attack organizations one at a time. It finds the IT management software that sits above [...]

Browser-in-the-Middle: The Phishing Technique That Bypasses MFA | ByteVanguard Vulnerabilities Attackers are no longer trying to steal your password. They’re handing you a keyboard — one that belongs [...]

Published: May 27, 2026 A critical SQL injection flaw in Ghost CMS is being mass-exploited to hijack more than 700 legitimate websites — including universities and well-known tech [...]

Published: May 22, 2026 Microsoft has shipped out-of-band patches for two Microsoft Defender flaws that are already being exploited in the wild, and CISA has added both to [...]

Published: May 1, 2026 Remote management planes are having a bad week. Two days after CISA added ConnectWise ScreenConnect to the Known Exploited Vulnerabilities catalog, the agency added [...]

Published: April 21, 2026 What Defenders Should Know CISA KEV update: CISA added eight new vulnerabilities to the Known Exploited Vulnerabilities catalog on April 20, 2026, affecting PaperCut [...]

Published: April 14, 2026 CISA KEV Update: On April 13, CISA added seven new vulnerabilities to its Known Exploited Vulnerabilities catalog. On paper, the list looks strange: a [...]