The latest Vulnerabilities coverage, tracked and summarised by the analysts who run our SOC.
Updated daily · last update May 5, 2026
A critical authentication bypass vulnerability in cPanel has been under active exploitation since February, two months before the vendor issued a patch. CVE-2026-41940 carries a…
CISA added CVE-2026-31431 to its Known Exploited Vulnerabilities catalogue on Friday, confirming that a nine-year-old Linux kernel flaw is being exploited in live attacks. The…
A command injection flaw in GitHub's git push pipeline could have allowed attackers to execute arbitrary code on GitHub servers and access
Microsoft Defender is under coordinated attack through three zero-day vulnerabilities that turn the security software into an attack vector. Huntress confirmed active
Attackers have been inside Adobe Reader systems for four months before anyone caught them. The zero-day vulnerability, discovered by EXPMON researcher Haifei
A frustrated security researcher has released working exploit code for an unpatched Windows vulnerability that allows attackers to escalate from ordinary user
A critical flaw in the Ninja Forms File Upload plugin allows unauthenticated attackers to upload malicious files and execute arbitrary code on
Google shipped an emergency patch on February 13 to address a Chrome zero-day vulnerability that attackers have been exploiting in the wild.
This isn't a content mill. The threats we summarise here are the ones our Sweden-based analysts watch for across client environments, around the clock.
See how MDR worksArticles
Longer-form briefings and explainers, from incident breakdowns to practical NIS2 and Zero-Trust guidance.
Cybersecurity 101
Plain-language explainers on the core concepts, threats and frameworks behind modern security, for specialists and decision-makers alike.