https://www.twisa.org/en/security-alerts/Track high-risk vulnerabilities and active exploitation. See who is exposed, what to fix, and how to verify your defenses.enhttps://www.twisa.org/en/news/2026-11-01-ivanti-connect-secure-exploitation/Organizations using Connect Secure for VPN or remote access should verify appliance versions, preserve evidence and review connected identities and services.https://www.twisa.org/en/news/2026-11-01-ivanti-connect-secure-exploitation/Sun, 01 Nov 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-30-freeswitch-sip-active-exploitation/FreeSWITCH confirmed exploitation of a SIP MESSAGE vulnerability that can run commands with the service’s privileges. Upgrade to 1.11.3 or later.https://www.twisa.org/en/news/2026-10-30-freeswitch-sip-active-exploitation/Sat, 31 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-31-gitlab-cve-97229-active-exploitation/Alpine Linux reported attempts to exploit CVE-2026-97229 against its self-hosted GitLab. For custom packages, verify the Ruby runtime as well as the GitLab version.https://www.twisa.org/en/news/2026-10-31-gitlab-cve-97229-active-exploitation/Sat, 31 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-31-cisco-asa-ftd-vpn-active-exploitation/An unauthenticated attacker can trigger a device reload under a specific secondary-authentication configuration, interrupting remote access.https://www.twisa.org/en/news/2026-10-31-cisco-asa-ftd-vpn-active-exploitation/Sat, 31 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-30-linux-tcp-cve-2026-98432/CVE-2026-98432 affects TCP connection handling. A research demonstration achieved remote root command execution with a specific Multipath TCP listener.https://www.twisa.org/en/news/2026-10-30-linux-tcp-cve-2026-98432/Fri, 30 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-29-synology-nas-c3rb3r-ransomware/An exposed NAS can put backup and recovery at risk. First determine whether the device shows signs of encryption or compromise.https://www.twisa.org/en/news/2026-10-29-synology-nas-c3rb3r-ransomware/Thu, 29 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-29-adobe-commerce-active-exploitation/CISA added CVE-2026-48356 to its Known Exploited Vulnerabilities catalog on October 27, 2026. Check store deployments, managed environments and related modules.https://www.twisa.org/en/news/2026-10-29-adobe-commerce-active-exploitation/Thu, 29 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-29-fortibleed-2-credential-exposure/Review current and retired FortiGate appliances, restrict management access, and investigate VPN, LDAP and other credentials that may have been exposed.https://www.twisa.org/en/news/2026-10-29-fortibleed-2-credential-exposure/Thu, 29 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-28-php-active-exploitation/Check public sites, APIs, internal back offices and products with embedded PHP. Update the runtime and review systems that were reachable before the patch.https://www.twisa.org/en/news/2026-10-28-php-active-exploitation/Wed, 28 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-28-panos-management-active-exploitation/Palo Alto Networks observed exploitation targeting exposed management interfaces. Restrict access to the web UI and XML API, preserve evidence and apply the correct fix.https://www.twisa.org/en/news/2026-10-28-panos-management-active-exploitation/Wed, 28 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-26-flutter-firebase-certificate-trust/Embedded TLS trust data can remain outdated after an OS update. Check the SDK and platform, then rebuild and redistribute affected applications.https://www.twisa.org/en/news/2026-10-26-flutter-firebase-certificate-trust/Mon, 26 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-25-brotli-http2shell-security-update/CVE-2026-111497 was added to CISA’s Known Exploited Vulnerabilities catalog. Check inbound requests and outbound HTTP clients that decompress untrusted Brotli content.https://www.twisa.org/en/news/2026-10-25-brotli-http2shell-security-update/Sun, 25 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-24-ruby-onigmo-security-update/Ruby released 4.0.9, 3.4.12 and 3.3.13 on October 23, 2026. All three releases fix four Onigmo regular expression compilation defects. Memory corruption may occur when an application compiles an attacker-controlled pattern. Check search, filtering and user-defined rules first.https://www.twisa.org/en/news/2026-10-24-ruby-onigmo-security-update/Sat, 24 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-23-godaddy-ssl-certificate-revocation/GoDaddy revoked a batch of affected SSL certificates on October 21, 2026 after a CP/CPS certificate profile issue led to incorrect issuance. Services still presenting a revoked certificate may show warnings or fail to connect, affecting transactions, sign-ins and API integrations.https://www.twisa.org/en/news/2026-10-23-godaddy-ssl-certificate-revocation/Fri, 23 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-23-fortinet-security-hardening-release/Fortinet announced security hardening updates on October 21, 2026, with most releases on October 22. Inventory internet-facing devices and management interfaces, then upgrade by product and branch.https://www.twisa.org/en/news/2026-10-23-fortinet-security-hardening-release/Fri, 23 Oct 2026 00:00:00 +0800https://www.twisa.org/en/news/2026-10-23-python-emsign-ca-update/Python advised users on October 20, 2026 to update trust data following the eMudhra/emSign intermediate CA incident. Affected trust data could let a TLS client accept an impersonated service, including package downloads.https://www.twisa.org/en/news/2026-10-23-python-emsign-ca-update/Fri, 23 Oct 2026 00:00:00 +0800