28 Sept - 04 Oct 2026 A high-severity vulnerability in Microsoft SharePoint Server has recently drawn attention. CVE-2026-65660 is a CWE-94 code injection vulnerability that can allow an authenticated attacker...

Cyber (In)Security #210 is out. In this issue: Kamran Israr Mirza (Kim) briefs boards on Dubai's virtual assets regulator VARA we welcome eleven mentees to the autumn 2026 Mentorship Programme...

21 - 27 Sept 2026 What happens when the security infrastructure itself becomes the target? This week’s CVE of The Week covers CVE-2026-93616, a critical Check Point zero-day vulnerability with...

A Board Briefing on Mandate, Licensing, Controls and Enforcement Prepared by Kim | CISO | linkedin.com/in/kimabdalian | September 2026 | Target audience: Executiveand Senior Management Dubai's Virtual Assets Regulatory Authority...

14 - 20 Sept 2026 What if an unauthenticated user could read your sensitive data from the GitLab server? This week’s CVE of the Week highlights CVE-2026-85706 in GitLab -...

07 - 12 Sept 2026 A critical CVSS 10.0 vulnerability puts thousands of Internet-facing SAP systems potentially at risk. Our latest CVE of the Week covers CVE-2026-44756, a buffer overflow...

Cyber (In)Security issue 209 is out — our mentorship programme returns for autumn 2026 with ten member mentors, our Community Partner role at the Trust & Safety Festival Sydney, three...

CyAN's mentorship programme is back for its autumn 2026 cohort. Over the next three months, ten of our members are giving their time to mentor people building careers in cybersecurity...

31 Aug - 06 Sept 2026 A critical CVSS 10.0 vulnerability puts the spotlight on one of the oldest tricks in the hacker’s toolbox: SQL injection. This week’s CVE of...

24 - 30 Aug 2026 What if your AI assistant could be tricked into handing your data to an attacker? This week’s CVE of the Week looks at CVE-2026-24301 (CoSnitch),...

Pakistani financial institutions are absorbing five regulatory reforms inside roughly a nineteen-month window: The State Bank of Pakistan's Cyber Shield resilience strategy, National CERT's newly cabinet-approved Pakistan Information Security Framework...

17 - 23 Aug 2026 AI platforms are increasingly becoming attractive targets for attackers. CVE-2026-9198 affects IBM Langflow OSS and chains security flaws that can lead to unauthenticated Remote Code...

The fortnightly newsletter of the Cybersecurity Advisors Network (CyAN) — Issue #208, 17 August 2026. This issue leads with crypto custody governance and our autumn mentorship intake, plus two serious...

10 - 16 Aug 2026 A critical unauthenticated remote code execution (RCE) vulnerability has been disclosed in JetBrains TeamCity On-Premises. Tracked as CVE-2026-63077 with a CVSS score of 9.8, the...

Another great publication from CyAN member Kamran Israr Mirza (Kim), find him on LinkedIn at https://www.linkedin.com/in/kimabdalian/ Stablecoins have moved from experimental instruments to core payment infrastructure, and with that shift,...

03-09 Aug 2026 CVE-2026-18577 is a critical authentication bypass vulnerability affecting N-able N-central. Due to an incomplete patch, attackers can gain administrative access, abuse the built-in Take Control feature, and...

CyAN's mentorship programme is back for its autumn 2026 cohort, running from mid-September to mid-December. The programme is free and volunteer-led. It pairs people building a career in cybersecurity, or...

The fortnightly newsletter of the Cybersecurity Advisors Network (CyAN) — Issue #207, 4 August 2026. This issue leads with governance and civil-society resilience, plus the latest from our members and...

CyAN's mission is to strengthen and protect global digital society and the online economy, and to work against the digital threats facing individuals, democracy and trade.  Organisations that feed people,...

27 July - 02 Aug 2026 This week's CVE of the Week is CVE-2026-54121, also known as CertiGhost, a critical vulnerability affecting Microsoft Active Directory Certificate Services (AD CS). The...

A significant share of organizations still place the Security Operations Center (SOC) organizationally under the Chief Technology Officer, while the Chief Information Security Officer and a small security function operate...

20 -26 July 2026 In this week's CVE of the Week, we're examining a recently patched vulnerability chain in the Adobe Acrobat PDF Chrome extension, which is used by more...

In this issue: From the community — David Gaul on Australia's Horizon Cyber Security Initiative and what it means for industry; Sanchay Joshi on whether boards are ready to govern...

CyAN mentorship programme participant David Gaul writes about Australia's "Horizon" initiative - what can industry members expect ahead of changes in legislation? What are the implications for Australian businesses? Australia...

Cybersecurity is now firmly in the boardroom, but board attention alone does not equal effective oversight. This article traces how cyber risk evolved from an IT operational concern into a...

13 -19 July 2026 This week our CVE of the Week is CVE-2026-56164, a zero-day Elevation of Privilege vulnerability affecting Microsoft SharePoint Server that Microsoft confirmed is being actively exploited...

[dflip id="102443"][/dflip]

06 -12 July 2026 In this week's CVE of the Week, we're looking at CVE-2026-50746, a critical vulnerability affecting the Ubiquiti UniFi Connect Application, with a CVSS score of 10.0....

29 June - 05 July 2026 One of the most discussed security issues in weeks is CVE-2026-50656, also known as RoguePlanet, an Elevation of Privilege (EoP) vulnerability affecting the Microsoft...

[dflip id="102428"][/dflip] You can download this edition by clicking the three dots icon on the far right and selecting Download PDF File. For the best reading experience, we recommend enlarging...

Kim is a senior cybersecurity and technology risk executive with 28+ years of experience leading security strategy, enterprise architecture, governance, and incident response across financial services, government, multinational enterprises, and telecom sectors....

22 - 28 June 2026 In this week's CVE of The Week, we'll be looking at a newly exploited, high-severity server-side request forgery (SSRF) vulnerability, in Cisco Unified Communications Manager...

Healthcare [dflip id="102414"][/dflip]

[dflip id="102408"][/dflip] You can download this edition by clicking the three dots icon on the far right and selecting Download PDF File. For the best reading experience, we recommend enlarging...

Recent reporting from Hudson Rock claims that more than 75,000 Fortinet firewalls may remain compromised despite organisations applying patches intended to address known vulnerabilities. If accurate, the finding is concerning....

15 - 21 June 2026 Critical vulnerability has been found with the CVSS score of 9.8 in CVE-2026-35273. Our CVE of the Week is about PeopleSoft which is a comprehensive...

[dflip id="102386"][/dflip]

What happens when your brain becomes a connected device?Introduction The release of ChatGPT marked a turning point in public awareness of artificial intelligence. Suddenly, everyone was talking about machines that...

[dflip id="102374"][/dflip] You can download this edition by clicking the three dots icon on the far right and selecting Download PDF File. For the best reading experience, we recommend enlarging...

08 - 14 June 2026 This week's CVE of the Week highlights an unauthenticated remote code execution vulnerability in Ivanti Sentry, CVE-2026-10520. Ivanti Sentry is an in-line gateway that manages,...

01 - 07 June 2026 A newly discovered vulnerability in Microsoft Exchange is currently being actively exploited by attackers. The issue, identified as CVE-2026-42897, this week's CVE of the Week,...

25 - 31 May 2026 CVE-2026-26980 is a critical SQL Injection vulnerability affecting Ghost CMS, a popular Node.js-based content management platform. In this week's CVE of the Week we'll be...

Issa Diarra is a Cybersecurity Engineer and Splunk Expert with more than 10 years of experience in IT, including 5 years dedicated to SOC operations, SIEM engineering, cyber threat detection,...

[dflip id="102332"][/dflip]

[dflip id="102327"][/dflip]

A thought I can’t quite shake I’ve been thinking about poker machines lately, which is not a sentence I expected to write. Not because gambling is new, and not because...

18 - 24 May 2026 In this week's CVE of the Week, we'll be looking at a vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller. Cisco Catalyst SD-WAN...

[dflip id="102311"][/dflip] You can download this edition by clicking the three dots icon on the far right and selecting Download PDF File. For the best reading experience, we recommend enlarging...

11 - 17 May 2026 This week’s spotlight is on CVE‑2026‑41089, a critical stack‑based buffer overflow in the Windows Netlogon service that allows remote, unauthenticated code execution on domain controllers....

[dflip id="102295"][/dflip] You can download this edition by clicking the three dots icon on the far right and selecting Download PDF File. For the best reading experience, we recommend enlarging...