TWISA
Security alerts
Track high-risk vulnerabilities and active exploitation. See who is exposed, what to fix, and how to verify your defenses.
Latest articles
- 2026.11.01Exploitation reported
Ivanti Connect Secure exploited: patch VPN appliances and investigate access
Organizations using Connect Secure for VPN or remote access should verify appliance versions, preserve evidence and review connected identities and services.
- 2026.10.31Exploitation reported
FreeSWITCH SIP flaw exploited: update business phone and contact center systems
FreeSWITCH confirmed exploitation of a SIP MESSAGE vulnerability that can run commands with the service’s privileges. Upgrade to 1.11.3 or later.
- 2026.10.31Exploitation reported
GitLab exploit attempts: verify the Ruby patch and review CI credentials
Alpine Linux reported attempts to exploit CVE-2026-97229 against its self-hosted GitLab. For custom packages, verify the Ruby runtime as well as the GitLab version.
- 2026.10.31Exploitation reported
Cisco SSL VPN flaw exploited: patch ASA and FTD and verify failover
An unauthenticated attacker can trigger a device reload under a specific secondary-authentication configuration, interrupting remote access.
- 2026.10.30Vulnerability advisory
Linux kernel TCP flaw: identify reachable services and patch the running kernel
CVE-2026-98432 affects TCP connection handling. A research demonstration achieved remote root command execution with a specific Multipath TCP listener.
- 2026.10.29Exploitation reported
Ransomware targeting older Synology DSM: check the NAS before updating
An exposed NAS can put backup and recovery at risk. First determine whether the device shows signs of encryption or compromise.
- 2026.10.29Exploitation reported
Adobe Commerce upload flaw exploited: patch stores and review account access
CISA added CVE-2026-48356 to its Known Exploited Vulnerabilities catalog on October 27, 2026. Check store deployments, managed environments and related modules.
- 2026.10.29Credential exposure
FortiBleed 2.0: investigate FortiGate configuration and credential exposure
Review current and retired FortiGate appliances, restrict management access, and investigate VPN, LDAP and other credentials that may have been exposed.
- 2026.10.28Exploitation reported
Two PHP vulnerabilities exploited: patch the running services and investigate compromise
Check public sites, APIs, internal back offices and products with embedded PHP. Update the runtime and review systems that were reachable before the patch.
- 2026.10.28Exploited vulnerability
Exploited PAN-OS management interfaces: restrict access and patch by release branch
Palo Alto Networks observed exploitation targeting exposed management interfaces. Restrict access to the web UI and XML API, preserve evidence and apply the correct fix.
- 2026.10.26Certificate trust
Flutter and Firebase certificate trust: update SDKs and release rebuilt apps
Embedded TLS trust data can remain outdated after an OS update. Check the SDK and platform, then rebuild and redistribute affected applications.
- 2026.10.25Exploited vulnerability
HTTP2Shell: patch Brotli decoders on both HTTP paths
CVE-2026-111497 was added to CISA’s Known Exploited Vulnerabilities catalog. Check inbound requests and outbound HTTP clients that decompress untrusted Brotli content.
- 2026.10.24Runtime security
Ruby Onigmo memory corruption: update runtimes and review dynamic regex inputs
Ruby released 4.0.9, 3.4.12 and 3.3.13 on October 23, 2026. All three releases fix four Onigmo regular expression compilation defects. Memory corruption may occur when an application compiles an attacker-controlled pattern. Check search, filtering and user-defined rules first.
- 2026.10.23Certificate revocation
GoDaddy SSL certificate revocation: deploy replacements and verify live services
GoDaddy revoked a batch of affected SSL certificates on October 21, 2026 after a CP/CPS certificate profile issue led to incorrect issuance. Services still presenting a revoked certificate may show warnings or fail to connect, affecting transactions, sign-ins and API integrations.
- 2026.10.23Security update
Fortinet security updates: secure management access and upgrade appliances
Fortinet announced security hardening updates on October 21, 2026, with most releases on October 22. Inventory internet-facing devices and management interfaces, then upgrade by product and branch.
- 2026.10.23Certificate trust
Python certificate trust: update tooling in every runtime
Python advised users on October 20, 2026 to update trust data following the eMudhra/emSign intermediate CA incident. Affected trust data could let a TLS client accept an impersonated service, including package downloads.