Security insights
The blog.
Analysis of the latest vulnerabilities and threats, prioritized for Saudi finance.
CVE-2026-41940: cPanel Zero-Day Exploited for Months Puts 1.5 Million Servers at Risk
21 May 2026
MiniPlasma Zero-Day: A Six-Year-Old Windows Flaw Returns to Grant SYSTEM Access on Fully Patched Machines
21 May 2026
SEPPmail Gateway Flaws CVE-2026-2743: When Your Email Security Becomes the Attack Vector
21 May 2026
CVE-2026-21858: Critical n8n RCE Flaw Gives Attackers Full Control of Your Automation Pipelines
21 May 2026
YellowKey BitLocker Bypass CVE-2026-45585: A USB Drive Is All It Takes to Unlock Your Encrypted Data
21 May 2026
CVE-2026-23918: Apache HTTP/2 Double-Free Flaw Crashes Servers and Opens the Door to RCE
21 May 2026
EvilTokens PhaaS: Device Code Phishing Bypasses MFA to Hijack Microsoft 365 Accounts
21 May 2026
CVE-2026-31431 Copy Fail: 732 Bytes to Root on Every Linux Server Since 2017
21 May 2026
Drupal SA-CORE-2026-004: No-Auth SQL Injection Threatens Every PostgreSQL-Backed Site
21 May 2026
CVE-2026-42897: Exchange Server Zero-Day Turns Your Inbox Into an Attack Surface
21 May 2026
CVE-2026-41096: Windows DNS Client RCE Lets Attackers Hijack Every Endpoint Without a Click
21 May 2026
CVE-2026-0073: Android Zero-Click RCE Lets Attackers Hijack Devices Over Wi-Fi
21 May 2026
1 / 35
Next