Current security alerts, regulatory guidance and practical knowledge for well-founded cyber risk decisions.
DORA Information Registry: How Financial Institutions File Reports with BaFin — Legal Basis, Formats, Deadlines, and When a Report Is Considered Filed.
Read Article
CVE-2026-19478 (CVSS 9.4) affects GitLab CE/EE (self-managed) and, under certain conditions, could allow unauthenticated modifications or deletions. Active exploitation has been confirmed.
Read Article Section 39 of the BSI Act (BSIG) changes the compliance requirements for KRITIS operators. Learn what the new 3-year cycle and defect monitoring entail.
Read Article Analysis of the critical vulnerability CVE-2026-18691 (CVSS 9.0) in MongoDB Server. Details on the risk of compromise to replica sets and recommended actions.
Read Article Analysis of the critical RCE vulnerability CVE-2026-58231 (CVSS 10.0) in SAP Commerce Cloud. Affected versions, available patches, and recommended actions for organizations.
Read Article Critical vulnerabilities (CVE-2026-28005, CVE-2026-6235, CVSS 9.8) in the WordPress plugins Kadence WooCommerce Email Designer and Sendmachine allow unauthenticated privilege escalation.
Read Article Analysis of the critical vulnerability CVE-2026-66447 (CVSS 9.3) in the WordPress File Upload plugin. Versions <= 5.1.7 are affected. Details and mitigation steps.
Read Article
AI-Powered IT Security Analysis When senior management requests an assessment of the IT security situation on short notice, every minute counts. LocateRisk provides an interface based on the Model Context Protocol (MCP) for this purpose. As currently the only provider in the field of External Attack Surface Management (EASM), LocateRisk enables direct machine-to-machine communication between the security platform and artificial intelligence. The result: a comprehensive, presentation-ready overview of the external attack surface in under 30 seconds.
Read Article A critical vulnerability (CVE-2026-41452) in Krayin CRM 2.2.4 allows unauthenticated attackers to completely take over the admin account.
Read Article A critical vulnerability (CVE-2026-58066) in Rocket.Chat with a CVSS score of 9.8 allows attackers to take over any account via SAML SSO. Patches are available.
Read Article An advisory for Apache Traffic Server describes seven critical vulnerabilities, including CVE-2026-58150 and CVE-2026-58162 with a CVSS score of 10.0, as well as CVE-2026-58154/58155, with a CVSS score of 9.2. Patches are available.
Read Article Analysis of the critical vulnerability CVE-2026-63227 (CVSS 9.9) in Koollab LMS. An insecure file upload allows remote code execution. A patch is available.
Read Article Critical vulnerabilities (CVE-2026-15014, CVE-2026-8457, CVE-2025-10656, CVSS 9.8; CVE-2026-3141, CVSS 9.1) in WordPress plugins for WooCommerce allow attackers to take over accounts, gain unauthorized access, and delete files.
Read Article
English 
Deutsch 
Français